Version 3.7 Released Halloween 2023

• The Yandex Browser Data evidence support has been added. It provides access to the following information:
  • Multi-profile
  • History
  • Downloads
  • Keywords
  • Logins
  • Autofill items
  • Cookies
  • Bookmarks
  • Backup Bookmarks
• Import of Ring Camera Compliance Archive data has been added.
• New registry keys have been added to Data Triage:
  • HKU\SOFTWARE\Microsoft\Office\16.0\Excel\User MRU
  • HKU\SOFTWARE\Microsoft\Office\16.0\Excel\File MRU
  • HKU\SOFTWARE\Microsoft\Office\16.0\PowerPoint\User MRU
  • HKU\SOFTWARE\Microsoft\Office\16.0\PowerPoint\File MRU
  • HKU\SOFTWARE\Microsoft\Office\16.0\Word\User MRU
  • HKU\SOFTWARE\Microsoft\Office\16.0\Word\File MRU
• OfficeFileCache data has been added to the office Artifacts category in Data Triage.
• Google Takeout Archive data import has been added. It allows importing and parsing of the following data for future investigation:
  • Access Log Activity
  • Account Access Activity
  • Device Access Activity
  • Location History
  • Records
  • Maps
  • My labeled places
  • Google Pay
  • Google transactions
  • Google Play Store
  • Subscriptions
  • Installs
  • Order history
  • Devices
  • Google Shopping
  • Addresses data
  • Shopping cart data
  • Mail (if located not outside the archive)
    • Mailbox

• Support of iOS 17 devices logical acquisition has been added.
• Support of iOS 17 encrypted and non-encrypted backup import has been added.
• Support of Android 14 devices logical and targeted triage logical acquisition has been added.
• Support of Android 14 ADB backup import has been added.
• The Seizure Service agent used for Android logical and targeted-triage logical acquisition has been updated to work smoothly with newer versions of the Android OS.
• iOS Jailbroken Activity Timeline (KnowlegeC.db) parsing has been added for the physical acquisition of iOS devices.
• The Qualcomm EDL drivers have been updated in the Driver Pack.
• Import of Ring Camera Compliance Archive data has been added.
• Data import via the iLEAPP and ALEAPP tools for have been added to E3:FREE.

• The iCloud Photos import has been added. It allows to import of the following items from the iCloud Photos sync data for accounts with and without 2FA:
  • Album/Folder List
  • Media List (Library)
  • Hidden Media List
  • Recently Deleted Media List (including media deleted up to 40 days before and not displayed in the iCloud photos interface).
  • Media files
• Support for two-factor authentication when importing Gmail and Google Drive data has been added.
• The new Investigation Details grid contains information about access to each cloud source, such as access time, imported features, tokens or credentials, and more.
• The new Investigation Summary grid contains summarized information on the investigation such as the resulting case size, total imported items count, investigation timeframe, and more.
• Support of third-party Proxy Servers during Cloud Import and Live Cloud import has been added. This allows investigators to avoid their IP being blocked by Cloud Services. An additional layer of protection from man-in-the-middle attacks is added for using Proxy Servers.
• File extension and name displaying for imported Instagram media have been improved.

• The new Investigation Details grid contains information about access to each cloud source, such as access time, imported features, account information, and more.
• The new Investigation Summary grid contains summarized information on the investigation such as the resulting case size, total imported items count, investigation timeframe, and more.
• Support of third-party Proxy Servers during OSINT Cloud Import has been added. This allows investigators to avoid their IP being blocked by Cloud Services. An additional layer of protection from man-in-the-middle attacks is added for using Proxy Servers.

• No changes this release.