Apple Wallet | iOS: Updated support for recovering expiration dates for Wallet Passes. [14.0]
Email | iOS, MacOS, and Windows: For EML(X), EML, MBOX, Apple Mail, and Windows 8 Mail, significantly reduced carving time for very large log files that contain emails. Additionally, improved recovery for header, body, and attachments fragments.
Facebook Messenger | iOS: Updated support for generating chat threads for Facebook Messenger messages. Additionally, when the Remove duplicates setting is turned on, the product will attempt to ignore carved hits that duplicate parsed hits.
Google Photos | Android: Added support for recovering comments, media, and albums. [5.46]
SMS/MMS (Content Provider) | Android: Updated chat threads and participants list to include the local user.
Samsung Health Steps (Device) | Android: Added support for recovering steps tracked by the Samsung Health app on non-wearable devices. [6.15.6.1]
Slack | iOS: Updated support for recovering channels. [21.6.32]
TextPlus | Android: Added support for recovering calls and messages. [7.6, 7.7]
Twitter Warrant Returns | Cloud: Added support for recovering direct messages, users, and Tweets.
User Word Dictionary | iOS: Updated support for recovering the user word dictionary from the latest version. [14.0]
WEBP | Android, iOS, and Windows: Added carving support for .webp files and parsing support for .webp extensions.
Yahoo! Webmail | iOS: Updated support for recovering mail messages. [6.30.0]
Zello | Android: Updated support for recovering messages. [4.112.1]
Cloud
Added tooltip and documentation noting that only the JSON format of Facebook's Download Your Information is supported.
Improvements to timeout and logging when scanning a WhatsApp QR code.
In March 2021, the format of warrant returns provided by Apple changed. For information about processing the new warrant return format, log in to the Customer Portal to review the Prepare Apple Warrant Returns for acquisition article.
Microsoft Teams now uses .pst ClientSubmitTime instead of CreationTime for the SendTimestampDateTimeUTC fragment.
You can now load and validate a Twitter Warrant Return package.
You can now see the WhatsApp contact display name in the Details card in AXIOM Examine as well as in reports.
Remote acquisition
When selecting files and folders to download, clicking on a folder in the results view now navigates to that folder in the tree view.
You can now select all or clear all items when selecting files and folders to download.
You can now cancel a search in progress when selecting files and folders to download.
Examining
Improvements to the progress spinner when exporting chat threads.
Bug fixes
AXIOM would crash due to incorrect logic in the pattern matching library. -AXP-8267
If the required media feature pack has not been installed on your forensic workstation, AXIOM Process now notifies you on startup. -AXP-7205
Sometimes, in the File system explorer, AXIOM Examine would experience a SQL logic error. -AXE-9455
When adding evidence to a case, the "gathering file system index data" step would not complete. -AXE-8613
Discord data from the latest version (1.0.9002) was not parsed for Windows. -COMP-1431
Previously, Hangul documents were only carved and not parsed. -COMP-1347
Previously, you were unable to acquire Google Drive backups of WhatsApp accounts. -CAO-3163
When you clicked the WhatsApp QR code access, the QR code pop-up did not load and AXIOM Process froze. -CAO-3978
Updated support to correct an issue in which generated thumbnails were occasionally missing for some videos.