Belkasoft Evidence Center X or, for short, Belkasoft X, is a new flagship Belkasoft's product for digital forensics and incident investigations.

The version 1.2 of Belkasoft X introduces a new Android acquisition method, updated iOS acquisition and a number of new artifacts for macOS and iOS.

Upgrading from previous versions of Belkasoft X to version 1.2 is free to all customers with a non-expired Software Maintenance and Support contract. Customers without a current contract can purchase it from the Customer Portal. Customers with a valid Belkasoft Evidence Center SMS, can upgrade with discounts: please contact sales@belkasoft.com for your upgrade quote.

Affordable training with optional certification is available.

More on new features

Mobile forensics

• Logical acquisition of rooted Android devices supported (before, only physical images were extracted)
• Full file system iOS acquisition using checkm8 method updated for iOS 14.3 and 14.4
• iOS ChatSecure app extraction and analysis supported
• iOS Snapchat app extraction and analysis supported (TSAF format decoding for Snapchat v.11.6.3 and earlier)

Computer forensics

More macOS artifacts extraction and analysis supported:

• Notifications
• Netconfig

Bugfixes

A number of issues were fixed:

• Fixed: When changing General/Application folder path in Settings, the new folder path is not displayed in the field after reopening the window
• Fixed: Product freezes on opening a case if disk space is low
• Fixed: Extra symbols in some Japanese translations
• Fixed: Android Skype app analysis is not successful if analyzing dd image
• Fixed: VLC player is opened automatically when scrolling through the list of found videos
• Fixed: Cannot add data source with an internal data source of type 'iTunes'
• Fixed: Buttons display weird blurred colors after mouse over (actually, Microsoft issue for which a workaround was found)
• Fixed: Bookmark name length can be too long and is not fit UI
• Fixed: Double click opens checked picture/video/document instead of chosen
• Fixed: Many video players can be opened for the same video
• Fixed: Analysis of an iOS encrypted backup is not started if it is added while decryption of another backup
• Fixed: 'Current' offset option works incorrectly while 'Go to' in HexViewer
• Fixed: Windows Timeline missing artifacts
• Improvements: A number of User Interface improvements made