What's new in Belkasoft X v.2.3

Belkasoft Evidence Center X (Belkasoft X) is Belkasoft's flagship product for digital forensics, cyber incident response, and eDiscovery.

The biggest addition to Belkasoft X in v.2.3 is the new module for brute-forcing passcodes for iOS and Android devices. Additionally, the update includes parsing various new system and application artifacts for iOS and Android.

Upgrading from previous versions of Belkasoft X to v.2.3 is free for all customers with an active Software Maintenance and Support (SMS) contract. Customers with expired or expiring SMS contracts may review and renew them through the Customer Portal.

Affordable training with optional certification is also available, including on-demand options.

New Features Details

Mobile Passcode Brute-Force Module

The new Belkasoft X module allows brute-forcing (that is, guessing) passcodes, also known as passwords and pin codes, for a wide range of iOS devices and several Android devices. No specialized hardware is required; all you need is just Belkasoft X with the new module. The product can overcome various restrictions, including USB Restricted Mode, delays in between password attempts, and phone disabling after a series of unsuccessful passcode entries.

How to get the new module

For government customers, the new module is available as a paid upgrade of your Belkasoft X license.

For corporate customers, the new module is included in the X Scale edition and higher.

For more details, including supported device models, operating system compatibility, and brute-force speeds, visit https://belkasoft.com/brute.

Mobile Forensics

• Checkm8-based acquisition is improved for A10 on iOS 15
• Encrypted F2FS is supported
• UFDR support: Instant Messages import is improved

A number of new artifact types are supported and updated.

• iOS
  • Telegram (updated: chat threads supported)
  • Google Meet supported (v.190.0)
  • WhatsApp (updated)
  • Uber (updated)
• Android
  • ADB hosts (new)
  • Apps installed via GMS (new)
  • App Updates (Frosting.db) (new)
  • authokens accounts_de and authtokens accounts_ce (new)
  • Chrome browser cache (updated)
  • Google Play Searches (new)
  • LockSettings information (new)
  • Runtime permissions (new)
  • Telegram (updated; contact extraction improved)

Curious to learn more about newly supported Android artifacts? Attend our on-demand Android Forensics course, available at no charge from Feb 26 till Mar 26, 2024.

Other

• macOS AIM is improved
• Invalid pictures are not blurred, even if they fall under the hashset match node
• Visualization of long artifact names is improved on the Dashboard
• File system indexing is disabled to prevent infinite analysis of the Windows system folder
• The default Postgresql server locale for non-English languages is fixed to prevent issues in Turkish, Hungarian and other languages when used as the Windows system locale