Release Notes

Magnet IEF 6.25.0.16544 May 06, 2019

Artifacts

• Aloha | Android: Added support to recover auto fill, bookmarks, downloads, and history. [2.1.0.0]
• Android Browser | Android: Added support to recover bookmarks, keyword search terms, and history for older versions of Android Browser.
• Apple Notes | iOS: Updated parsing support to better recover data. [iOS 9.2.1]
• Apple Notes | iOS: Updated support to recover HTML content in the Apple Notes app. [iOS 9.2.1]
• Brave | Android: Updated support to recover top sites. [1.0.89]
• Calc Vault | Android: Added support for recovering browser history and bookmarks.
• Chrome Autofill | Windows: Now includes an attribute that indicates the date that the autofill value was last used. [61.0]
• Chrome Sync Accounts | Windows, macOS: Updated support to recover sync accounts on some versions. [61.0 on Windows, 63.0 on macOS]
• Chrome Web Visits | Windows: Updated to indicate the device that a search originates from.
• Edge Chromium | Windows: Added support for recovering data from the Edge Chromium browser.
• Event Logs | Windows: Improvements that result in more data being recovered.
• Facebook Messenger | Android: Updated to indicate whether a message was deleted by the user. [201.0.0]
• Facebook Messenger | iOS: Updated to indicate whether a message was deleted by the user. [202.0]
• Gmail | Android: Updated support to recover information about attachments. [9.1.13.233495724]
• Gmail | iOS: Added support to recover emails and attachments. [6.0.190224]
• Grindr | Android: Updated support for recovering messages and buddies on recent versions. [5.6.1]
• Instagram | iOS: Updated support to recover messages and group conversations. [75, 87]
• KnowledgeC | iOS: Added support to recover KnowledgeC Application Activities and Media History. [iOS 10]
• KnowledgeC | iOS: Updated support to recover missed hits on some iOS versions. Applies to KnowledgeC Application Focus, Device Lock States, Device Orientation States, Device Plugged-in States, and Screen Backlight States. [iOS 10]
• Lunascape | Android: Added support to recover auto fill, bookmarks, cookies, and history. [10.3.1]
• Lyft | iOS: Added support for recovering user accounts, last known locations, and payment details. [5.67.3]
• Mail | iOS: Updated support to improve recovery of emails and attachments. [iOS 12.1.2]
• Mail.ru Agent | Android: Added support to recover information about users, conversations, calls, and shared media. [7.4.1]
• Mail.ru Agent | iOS: Added support to recover information about users, conversations, calls, and shared media. [7.7.1]
• Prefetch Files | Windows: Updated support to include more information, such as the file hash and volume information, as well as better differentiation between different Windows versions. [Windows XP-10]
• Prefetch Files | Windows: Updated to include the File Creation Date/Time. [All versions]
• Reddit | iOS: Recover information about users, posts, and subreddits visited using the Reddit app. [4.27.1.305578]
• Safari | iOS: For GrayKey images, updated support to recover credit cards stored on Safari Keychain. [iOS 11+]
• Signal | iOS: Added support to recover encrypted data from Signal, including conversations, calls, and attachments. [2.33, 2.35, 2.38]
• Skype Emotions | Android: Added parsing and carving support to recover information about emotions used on Skype. [8.1 to 8.15]
• Skype Notifications | Android: Added support for recovering notifications in the latest Skype updates. [8.1 to 8.15]
• Skype | Windows: Updated parsing support to recover messages sent on Skype on Windows 7. [Skype 8.10, 8.12, 8.31, and 8.30.0.98]
• Sleipnir | Android: Added support to recover browsing information, including cookies, auto fill, bookmarks, history, and search terms. [3.5.13]
• Telegram | Android: Updated support to recover calls and attachments. [5.4.0]
• Telegram | Android: Updated support to recover calls, attachments, and sender and recipient data for messages. [5.4.0]
• Telegram | iOS: Updated support to improve recovery of conversations and user data. [5.4.1]
• TikTok | Android: Updated support to recover published and drafted videos. [10.3.0]
• TikTok | iOS: Updated support to recover published, viewed, and drafted videos. [10.3.0]
• Twitter | Android: Improvements to carving, resulting in more hits.
• UC Browser | Android: Added support to recover browsing information, including cookies, auto fill, bookmarks, history, and downloads. [12.10.9.1193]
• VLC Player | Windows: Added support for recovering recently played files. [3.0.6]

Bug fixes

• When analyzing data that’s AES and RC4 encrypted, incorrect NTLM hashes were reported for AES encrypted passwords. -TAO-240