Artifacts
- Facebook Messenger | iOS: Added support for retrieving attachment information for carved messages. [255]
- Google Hangouts | Android: Updated support for Google Hangouts Cached Images. [39.0.38]
- SMS/MMS Messages | Android: Android SMS and Android MMS artifacts have been combined into a single Android SMS / MMS artifact.
- Signal | Android: Updated support to decrypt the backup database for Signal Backup to recover Messages and Conversations artifacts. [5.17.3]
- Skype | iOS, Android, and Windows: Updated support to recover draft messages and include the [Draft] tag at the beginning of the message.
- Snapchat Memories | Android and iOS: Updated support to recover entry ID, user ID, and attachment information.
- Updated support to upgrade AXIOM to the latest version of ImageMagick.NET to mitigate Access Violation Exception crashes when processing certain images. Additionally, the upgrade provides improvements for image formats such as TIF and HEIC.
- Multiple artifacts | Android and iOS: When the Remove duplicates setting is turned on, the product will attempt to ignore carved hits that duplicate parsed hits for chat messages. This update applies to SMS/MMS/iMessage, Instagram, Signal, Snapchat, WeChat, WhatsApp, Wickr, and Telegram.
- Zoom | Windows: Added support for full database decryption.
Cloud
- Public and user account Facebook and Instragram icons are now updated.
- When Mega splits files into multiple streams for downloading, AXIOM can now download and recombine them.
- You can now see the WhatsApp display name in chat bubbles in AXIOM Examine.
Processing
- When you activate or renew a dongle license in Magnet License Manager, you no longer need to provide an activation code.
- When Magnet.AI is running over a network, a window appears with the option to either save the processing data to the case folder on the network, or skip saving the processing data.
- If you’ve installed the Passware plugin, AXIOM Process can now detect drives encrypted with Symantec Endpoint Encryption and decrypt these drives using a known password.
Examining
- The media categorization counts on the Case dashboard now match the counts in the Media explorer, and clicking on a media category link takes you to the Media explorer.
- VICS exports no longer contain duplicated media items, and accurately reflect the counts displayed in the Media explorer.
- When you create a VICS export, you can now choose to only export categorized media whose metadata exists in the VICS / CAID database, but the database doesn't yet contain the media itself.
Bug fixes
- AXIOM would sometimes crash with the exception "ERROR – 10: Unable to close stream". -AXP-8419
- After encountering a corrupt .zip file, AXIOM Process indicated search was running but no updates were made. -AXP-7931
- Improvements to how AXIOM processes F2FS file systems. -AXP-8339
- AXIOM was not correctly parsing all Recycle Bin files. -COMP-1479
- AXIOM was not correctly parsing all text messages and location sharing information from WhatsApp on Android. -MA-3282
- AXIOM was not correctly parsing the Message Status for some Live Location messages and incorrectly displayed Not received by Recipient. -MA-3328
- Previously, you were unable to acquire Google Drive backups of WhatsApp accounts. -CAO-3163
Known issues