New in Magnet IEF 6.18.0.12408 - September 13, 2018

Highlights

Artifacts

• iMessage/SMS/MMS: Updated carving support to recover sender/receiver information, timestamps, and more. [iOS 12]
• WhatsApp Messages: Added parsing and carving support for audio and video calls. [WhatsApp 2.17.22 - 2.17.33 on iOS]
• Wallet Transactions: Added parsing support to recover transaction history from a GrayKey or Jailbroken iOS image. [Wallet Transactions on iOS 10-12]
• Location History: Added parsing and carving support for cached system locations from a GrayKey image. [Location History on iOS]
• Apple Wallet: Added parsing support for pay cards and saved passes such as boarding passes, membership cards, and more. [iOS 11]
• Bluetooth Devices: Updated parsing support to recover Bluetooth devices that a user's iOS device came in proximity with. [iOS 11]
• Google Duo Calls: Added parsing support for Google Duo calls. [Google Duo Calls on Android]
• Google Duo Calls: Added parsing support for Google Duo calls. [Google Duo Calls on iOS]
• Siri Messages Search Suggestions: Added parsing and carving support to recover suggestions from Siri when a user searches for iOS messages. Supported for GrayKey images. [iOS]
• imo: Added parsing support to recover chat messages, voice calls, and video calls. [imo on Android]
• Viber Messages: Updated parsing support to recover messages. [Viber 6.8 and 9.3.1 on iOS]
• Carved Video: Updated MP4 carving support to include drc1, F4V, mmp4, and more.
• Audio: Updated parsing support to recover WAV and MP3 audio files. [Audio]
• Viber Messages: Updated parsing support to recover messages. [Viber 8.7-9.3 on Android]
• iOS Contacts: Updated parsing support to recover the profile pictures of contacts. [Contacts on iOS]
• Shareaza: Added parsing to link P2P user activity to a specific user GUID. [Shareaza on Windows]
• Android Device Information: Updated parsing support to recover IMEI, IMSI, and ICCID information. [Android]
• Twitter: Updated parsing and carving support to recover friends and direct messages. [Twitter 7.29.1 on iOS]
• Malware/Phishing URLs: Updated parsing support to include all suspicious URLs identified by the SANS Internet Storm Center (ISC) - Suspicious Domains List.

Fixed issues

• Sometimes temp files were not deleted after a scan finished because the files were being created in the output folder instead of your case folder. -IEF-5880

View the Release Notes for previous versions