Artifacts
- Apple Disk Images | macOS, Windows: Added support for recovering information about Apple disk images (.dmg and .img files).
- Autorun Items | Windows: Updated support for displaying registry value information in the Artifacts view.
- Burner Contacts | Android: Added support for recovering contact information. [4.2.13]
- Chromium Tab History | Android: Added support for recovering tab history from the following Chromium based browsers: Brave, Ecosia, Edge, Iron, Kiwi, Samsung and Whale.
- Facebook Messenger | iOS: Updated carving support for all supported Facebook Messenger artifacts. [255]
- Firefox Logins | Windows: Added support for recovering login information. [76]
- Houseparty Messages and Users | Android: Added support for recovering messages and user information. [1.41.1]
- Latent Wireless Geolocated WiFi Hotspots | Android, iOS, macOS, Windows: Added support for recovering Wifi hotspot data generated using Latent Wireless.
- Microsoft Edge Browser | iOS: Added support for recovering bookmarks, web history and favicons. [45.3.19]
- Private Photo Vault | iOS: Added support to recover albums and media information. [10.5]
- SMS/MMS Messages | Android: Updated parsing support for SMS and MMS messages. [Android 10]
- Safari Bookmarks | iOS, macOS: Updated parsing and carving support for local and synced bookmarks. [iOS 13, macOS 10.12]
- Safari Downloads | iOS: Updated support to recover .plist files. [iOS 13]
- Sim Card Information | Android: Added support for recovering SIM card information. [Android 10]
- TeamViewer Activity | Windows: Added support to recover TeamViewer activity data. [15 and earlier]
- Telegram Users | Android: Added support for recovering Telegram users. [5.13.1]
- Zoom Chat Messages | iOS: Updated support to recover call details as a part of the Chat Messages artifact. [4.6.11]
- Zoom Contacts | Android: Added parsing support for the Contacts artifact. [4.6.11]
Bug fixes
- Biography information from Tinder 11.3 for Android was not being recovered. -MA-2016
- False positive hits were being recovered for the TextFree Contacts artifact. -MA-1810
- Full email bodies could not be recovered from Windows 10 Mail. -COMP-680
- Hits were not being recovered for Houseparty 1.42.2 and 1.43.0 for Android. -MA-1964
- Notification Center | Windows: Updated support for recovering notifications. [Windows 10] -COMP-952
- Parsed hits from the Grindr Buddies artifact were sometimes being dropped. -MA-1928
- Slack artifacts for iOS were not being recovered. -MA-1999
- Snapchat data was not being recovered if the Android user had an additional account set up on their device. -MA-1877
- Telegram data was not being recovered if the Android user had an additional account set up on their device. -MA-1943
- The Registered Date/Time fragment name of the SIM Card Activity artifact did not accurately describe its contents. The fragment has been renamed to Updated Date/Time. -MA-1916
- The directions of recovered Zoom chat messages were not being reported. -MA-1882