New in Magnet IEF 6.12.3 - January 17, 2018
Artifacts
- Cloud: New Refined Results artifact called "Cloud Passwords and Tokens".
- Keychain for iOS 9, iOS 10, and iOS 11: Ability to decrypt and extract Internet Passwords and Generic Passwords from the keychain.
- iMessages for macOS 10.13.1: Updated support for the recovery of message dates.
- Twitter for iOS: Recover file attachments in the Twitter Direct Messages artifact.
- Carved Video: Addition of MD5 Hash, SHA1 Hash, and Category fragments, allowing videos to be categorized under Project VIC and compatible with the Griffeye workflow.
- Snapchat v10.12.5.0 for Android: Chat message carving updated.
- Skype v7.46 for Android: Message carving updated.
- Twitter v6.22.1 for Android: Twitter carving updated.
- Gmail v4.7.2.967015, v5.0.1, v7.6.18, and v7.7.30 for Android: Updated carving support to correctly recover fragments.
- Android Emails: Improved email carving support for accounts that aren’t Gmail accounts.
- Viber v6.6.1 for Windows: Updated parsing support for Messages, Calls, and Contacts. Expanded recovery to include additional information for Contacts and Calls.
- iOS iMessage/SMS/MMS: Names are now associated with the phone numbers/e-mail addresses of iMessage conversation partners.
- IP Addresses - Audio/Video Calls: New artifact to recover IP addresses left behind by online communication apps like Facebook and Hangouts (mainly found in RAM and the Pagefile/Hibernation files).
Fixed issues
- In some cases, the displayed Install Date/Time in the Operating System Information artifact were those of the most recent update, rather than the original update. The fragment label has been changed to Installed/Updated Date/Time to reflect this. -ART-8991
- When viewing portable cases, IEF Report Viewer was requesting Admin rights from the user. -IRV-1657