Artifacts
- Calendar | Android: Updated carving support for calendar events. [Android 6, 7, 8]
- Call Logs | Android: Updated carving support to recover more information about the call and local user, including the contact phone number and location information. [Android 7, 8]
- Chrome | Windows: Updated parsing support to recover installed browser plugins and extensions. [36-71]
- Contacts | Android: Updated parsing support to recover information about the last date and time and the number of times users were contacted by other devices. [Android 8]
- Custom Artifacts: In the XML schema for custom artifacts, platform values (i.e. iOS, Android, and Computer) are no longer case-sensitive.
- Custom Artifacts: XML custom artifacts that do not have a Platform element defined are no longer invalid, and is equivalent to specifying All platforms.
- Edge | Windows: Added support for recovering Favorites, Reading Lists, Top Sites, and Typed URLs. [44]
- Edge | Windows: Updated parsing support to recover installed extensions. [44.17763]
- Edge/Internet Explorer 10-11 | Windows: Updated several Internet Explorer 10-11 artifacts to now include results from Edge.
- Edge/Internet Explorer 10-11 | Windows: Updated support for recovering Cookies. [44]
- Firefox | Windows: Updated parsing support to recover installed add-ons. [62.0.3]
- Hangul | Android: Updated parsing and carving support to better recover Hangul documents from ADB database and .HWP files.
- iMessage/SMS/MMS | iOS: Improvements to how messages are recovered and cross-referenced with contacts, resulting in fewer hits that are missing recipient attributes. [iOS 12.1.2]
- iMessage/SMS/MMS | iOS: Names are now associated with the phone numbers/email addresses of iMessage conversation partners.
- Instagram | iOS: Updated support for recovering Direct Messages. [74.0]
- Kik Messenger | iOS: Added support for recovering anonymous chat messages. [15.0]
- Messages and Call Logs | Android: Improvements to the Connections view for the message and call log artifacts from multiple applications, so that results are associated with the local user.
- MMS | Android: Updated carving support to better recover MMS messages. [Android 6]
- Reddit | Android: Recover information about users, posts, and subreddits visited using the Reddit app.
- Samsung Browser | Android: Recover information about the Tabs that the user opens and the websites they visit. [9.0.00.32]
- Samsung Email | Android: Added carving and parsing support for Samsung Email messages. [Android 7]
- Snapchat | iOS: Added support for new GUID types to retrieve Snapchat videos sent in chats. [10.44-10.48]
- User Accounts | Windows: Added support for decryption of NTLM hashes to improve recovery of NTLM hashes and passwords. [Windows 10 v1607]
- Your Phone | Windows: Recover information about synced Pictures and Devices from the Your Phone application. [1803]
Bug fixes
- Carving some types of documents can cause a search to timeout. -ARTC-169
- Attachment filenames weren't being displayed in Skype conversations. -ART-10098
- Chat bubbles were not displayed in the Preview card for iOS SMS/MMS. -ART-10112
