Forensic Express 5.2 Released

Key new features

  • New Face Recognition module - find photos of people you are looking for, based on newest deep learning techniques
     
  • Exact references to sources of data items are now listed in reports - important to show where the evidence comes from, when necessary
     
  • Parental Check can now show only new data since previous phone check - this is significantly reducing quantity of data to read

New features and improvements

  • iTunes backup and ADB backup now available as a new export option, useful for other tools or re-use the in the future, in addition to the MOBILedit report
  • Pairings of phone numbers with contact names based on a phonebook are now marked with an asterisk in the report, to avoid false evidence interpretation

  • Improved identification and processing of less common image file formats

  • Improved accuracy and speed of Photo Recognizer - the object recognition module
  • Application analyzers can now obtain more data from jailbroken iPhones
  • Improved identification and extraction of vCard file contacts 
  • Multiple improvements in stability and speed for extracting data from Android and iOS devices
  • App analysis engine updated for new data references feature

Bugfixes

  • Fixed issue that caused program to crash while extracting Android physical image from some devices
  • Fixed issue that prevented UFDR exports to be loaded in the latest version of UFED Reader

New and updated application analyzers

New

  • Geocaching
  • Microsoft Edge
  • Microsoft Launcher (Android)
  • Microsoft Outlook
  • Microsoft To-Do
  • Snapseed
  • TamTam
  • Waze
  • WorldCard

Updated

All app analysis scripts updated for new data references feature, plus:

  • Chrome
  • Samsung Browser (Android)
  • WhatsApp (iOS)