New in Magnet IEF 6.15.11189 - June 21, 2018

Mobile and desktop artifacts

• Videos: Updated carving support for QuickTime videos.
• Internet Explorer 10-11 History: Updated parsing and carving of the "Access Count" attribute to more consistently represent user action instead of the database action. [Web]
• WeChat: Added support for recovery of nicknames and usernames of all chat participants. [WeChat 6.3-6.6 on iOS]
• Zoom User Accounts: The Zoom User Account artifact is now decrypted to fully recover conversation information. [Zoom 4.1.9355.0929 on Windows]
• OpenOffice: Added parsing and carving support for OpenOffice Writer, OpenOffice Calc, and OpenOffice Impress [OpenOffice 4.1.5 on Windows and OS X].
• iOS iMessage/SMS/MMS: Updated carving support to better recover chat threading information.
• Gmail: Added carving support to recover deleted emails. [Gmail 8.2 on Android]
• Facebook Pictures: Changed how Facebook pictures are classified to help deduplicate carved pictures and avoid over-reporting on picture quantities. [Web]
• OneDrive: Updated carving support to recover the list of synchronized/backed up files and their location on the user's computer. [OneDrive 17.3 on Windows]
• Added support for recovering Google Maps information. You can now recover saved locations, searched locations, and more. [Android]
• Skype: Updated parsing support for group chat details and contacts. [Skype 8.1-8.15 on Android]
• Skype: Updated parsing support for group chat details and contacts. [Skype 8.1-8.15 on iOS]
• Gmail Conversations: Added parsing and carving support for full history of email conversations. [Gmail 8.2 on Android]

Fixed issues

• Android SMS/MMS (Content Provider) artifact was not recovering timestamps for some messages. -ART-9549
• Sometimes Skype attributes were displaying hex values instead of plain text, such as "#3a" instead of ":". -ART-8821

View the Release Notes for previous versions