What's new in Belkasoft X v.1.2

Belkasoft Evidence Center X or, for short, Belkasoft X, is a new flagship Belkasoft's product for digital forensics and incident investigations.

The version 1.2 of Belkasoft X introduces a new Android acquisition method, updated iOS acquisition and a number of new artifacts for macOS and iOS.


Upgrading from previous versions of Belkasoft X to version 1.2 is free to all customers with a non-expired Software Maintenance and Support contract. Customers without a current contract can purchase it from the Customer Portal. Customers with a valid Belkasoft Evidence Center SMS, can upgrade with discounts: please contact sales@belkasoft.com for your upgrade quote.

Affordable training with optional certification is available.

More on new features

Mobile forensics

  • Logical acquisition of rooted Android devices supported (before, only physical images were extracted)
  • Full file system iOS acquisition using checkm8 method updated for iOS 14.3 and 14.4
  • iOS ChatSecure app extraction and analysis supported
  • iOS Snapchat app extraction and analysis supported (TSAF format decoding for Snapchat v.11.6.3 and earlier)

Computer forensics

More macOS artifacts extraction and analysis supported:

  • Notifications
  • Netconfig


A number of issues were fixed:

  • Fixed: When changing General/Application folder path in Settings, the new folder path is not displayed in the field after reopening the window
  • Fixed: Product freezes on opening a case if disk space is low
  • Fixed: Extra symbols in some Japanese translations
  • Fixed: Android Skype app analysis is not successful if analyzing dd image
  • Fixed: VLC player is opened automatically when scrolling through the list of found videos
  • Fixed: Cannot add data source with an internal data source of type 'iTunes'
  • Fixed: Buttons display weird blurred colors after mouse over (actually, Microsoft issue for which a workaround was found)
  • Fixed: Bookmark name length can be too long and is not fit UI
  • Fixed: Double click opens checked picture/video/document instead of chosen
  • Fixed: Many video players can be opened for the same video
  • Fixed: Analysis of an iOS encrypted backup is not started if it is added while decryption of another backup
  • Fixed: 'Current' offset option works incorrectly while 'Go to' in HexViewer
  • Fixed: Windows Timeline missing artifacts
  • Improvements: A number of User Interface improvements made