What's new in Belkasoft X v.2.5

Belkasoft Evidence Center X (Belkasoft X) is Belkasoft's flagship product for digital forensics, cyber incident response, and eDiscovery.

Belkasoft X v.2.5 introduces BelkaGPT, a revolutionary offline AI-assistant. In this new release, the Mobile Passcode Brute-Force module is massively expanded with dozens of new chipsets and device models for MTK and Kirin-based mobile devices.

Upgrading from previous versions of Belkasoft X to v.2.5 is free for all customers with an active Software Maintenance and Support (SMS) contract. Customers with expired or expiring SMS contracts may review and renew them through the Customer Portal.

Affordable training with optional certification is also available, including on-demand options.

New Features Details

BelkaGPT—Your AI Companion, Offline and Always at Your Service

Introducing our innovative offline AI assistant feature, powered by Belkasoft X's artifact extraction capabilities. BelkaGPT is a breakthrough in digital forensic technology that enables users to receive responses to their queries related to the case being analyzed. Along with answers to questions, BelkaGPT provides references to the three most relevant artifacts, enabling you to verify the correctness of the generated reply, enhancing accuracy and confidence in results.

Unlike competitors, Belkasoft's solution operates entirely offline. It is important to mention that, though GPU systems will provide quicker responses, the product can work even without a graphical processor, running on a CPU only. This allows smaller labs that use less advanced hardware to access this innovative feature.

Please ensure you follow the Belkasoft LinkedIn group for an announcement regarding a webinar exclusively dedicated to the BelkaGPT innovation.

This feature is currently in the beta-testing status.

Brute-Force Module Update

The Mobile Passcode Brute-Force module is significantly expanded with several dozen supported models:

• Belkasoft X can now brute-force and acquire multiple MTK devices. The supported models include those based on over 40 chipsets. Please refer to the brute-force page to access the full list of newly supported chipsets
• Huawei acquisition that bypasses the passcode is extended to Kirin 980-based devices. See the list of supported models on the brute-force page

Mobile Forensics

• Agent-based acquisition is improved for iOS 15.2-15.8.2, now extracting the full file system and keychain, compared to the partial acquisition available in v.2.4.
• Agent-based acquisition is further improved for iOS 16.0-16.5, with added support for 16.5.1
• Android screen capturer acquisition is updated for Telegram
• Device partitions are now displayed correctly for MTK-specific acquisition

A number of new artifact types are supported and updated.

• iOS
  • App Intents are extracted from KnowledgeC
  • Apple Maps (new)
  • Discord (new)
  • Duet notifications (new)
  • Google Maps (updated)
  • Google Maps Cache (new)
  • iCloud Drive
  • Microsoft Teams v.5.7.1 (updated)
  • Telegram v.9.6.2 (updated: polls, voice mail durations, and different chat events are supported)
  • Twitter v.9.56.1 (updated)
  • WhatsApp v.23.16.78 (updated)
  • Wire messenger (new)
• Android
  • ABX format for system files is supported
  • Facebook (updated: more metadata are extracted for attachments, new audio formats are supported)
  • FCM Queued Messages (new)
  • Shutdown checkpoints (new)
  • Telegram v.174.0 (updated)
  • VK (updated: media cache is parsed)
  • WhatsApp v.2.23.16.76 (updated)

Curious to learn more about Mobile Forensics with Belkasoft? Here are two on-demand certification courses for you:

• iOS Forensics with Belkasoft X (6 CPE)
• Android Forensics with Belkasoft X (6 CPE)

Cloud Forensics

• iCloud downloading is updated
• iCloud keychain extraction is updated
• WhatsApp downloading is updated

Other Improvements

• Carving performance and UI responsiveness are improved
• Passware integration is updated
• Export to RSMF is extended with possibilities to export group chats, SMS, and Overview data
• Outlook mailbox analysis is improved (properties with double values are supported, coordinates extraction is improved)
• Microsoft Teams analysis is improved (newer versions are supported, deleted messages are extracted where available)
• UFDR import is improved (now the product additionally supports documents, videos, pictures, text files, applications, audios, databases, archives files, user accounts; can import direction, read status and attachments from mails, and contacts; call logs import is improved)
• UFED keychain decryption is implemented
• A "Deleted time" column is added to the conversation list (with sorting and filtering)
• Carving of BMP formats specific for Adobe Photoshop is now supported
• SQLite Viewer: the ability to view cell data in Hex Viewer added (specifically useful for BLOBs)
• Better diagnostics of license activation problems is implemented
• Credit card data saved in a browser can now be exported