Windows 10 Timeline Activity: You can now recover information from the Timeline on Windows 10 to uncover a user's activities on their system, such as web history, document usage, media access, and so on.
Chrome: Updated carving support for web history. [Windows]
Keychain: Added parsing support for Keychain files recovered in a GrayKey image. [iOS]
WhatsApp: Added support to recover the administrator of group conversations. [Android]
Gmail: Updated carving support. [Gmail 7.6.18 on Android]
Jump Lists: Updated parsing of DestList attributes for new versions of Windows. [Windows 10]
Added support for recovering Content Provider artifacts when ingesting a Logical Android image that was acquired using UFED. Artifact coverage includes SMS, MMS, Call Logs, Contacts, and Calendar Events. [Android]