New in Magnet IEF 6.12.4.9640 - February 28, 2018
Artifacts
- iOS and Android messaging: In artifacts where the Local User was represented by an evidence number, 'Local User' has been added as a prefix for clarity (i.e. Local User <Evidence Number>) [iMessage/SMS/MMS Messages, iOS Call Logs, Kik Messenger for iOS, SMS/MMS Messages, Call Logs, Kik Messenger for Android]
- Android MMS: If there are multiple attachments within an Android MMS message, all of them are now recovered. The additional attachments are only available if the source evidence is an Android logical acquisition that was created by Magnet AXIOM or Magnet ACQUIRE.
- Skype Chat Messages: Now supports the recovery of the attachment file name and file size and added carving support for the latest versions [Skype 7.4 and 11.19+ for Windows, Skype 7.58 for macOS]
- Skype Calls: Updated carving support so that calls can be recovered in the latest versions [Skype 11.19.865 for Windows, Skype 7.58 for macOS]
- Facebook Messenger: You can now recover the latitude and longitude associated with messages [Messenger 127.0.0.18.81 - 145.0.0.25.203 for Android]
- iOS 11: Now includes support for displaying previews of HEIC files.
- Android Messages: Improvements to how attachments are recovered and displayed [Android Messages 2.2, 2.3]
- Android SMS: Updated carving support.
- Android Accounts: Updated support for Nougat Accounts information.
Fixed issues
- Samsung Text Logs can now be found in the Chat category when you view evidence (previously located under Mobile).
-ART-9249
- In some cases, carving for EML artifacts was off, resulting in some emails being missed. -ART-9139
- iOS iMessage, SMS, and MMS: Recipient and Sender fragment data was appearing multiple times. -ART-7736
- Japanese and Korean characters were not appearing correctly in certain Operating System and Internet Explorer artifacts. -ART-3330