Elcomsoft Phone Viewer 5.30 Gains the Ability to Display the Timeline Data

Elcomsoft Phone Viewer is updated to support new data types extracted from Microsoft accounts, and resolves a number of previously reported issues.

Moscow, Russia | June 30, 2021 –[Press Release Wire]– Elcomsoft Phone Viewer 5.30 adds support for more types of Microsoft account data, including Windows 10 Timeline, Account Activity (logins to the account), OneDrive files, recent OneDrive files history, and files from Microsoft Personal Vault. This update also fixes a number of issues found in prior releases.

Windows Timeline

Windows Timeline feature improves the presentation of tasks by displaying the history of user actions. It contains timestamped information about the user’s launched applications, searches, documents, and Web browsing history. Windows synchronizes the Timeline across devices when the user signs into the Microsoft account. Elcomsoft Phone Viewer 5.30 displays the content of the Microsoft account, extracted by Elcomsoft Phone Breaker 9.70, in a convenient layout. The ability to analyze user’s historical activities, such as app usage and Web page visits, making investigations more efficient.

Personal Vault and OneDrive

Personal Vault is a protected area in OneDrive that can be accessed with a strong authentication method or a second step of identity verification, such as your fingerprint, face, PIN, or a code sent to you via email or SMS. Although the files in Personal Vault have an extra layer of security, the recently updated Elcomsoft Phone Breaker 9.70 can now retrieve this information without the need to perform an additional (double) authentication. The latest version of Elcomsoft Phone Viewer supports parsing of these data types enabling experts to use Personal Vault and OneDrive files in their investigations.

Elcomsoft Phone Viewer 5.30 change log:

  • Added support for new data in Microsoft accounts (Apps and services, recent OneDrive files list, OneDrive files)
  • Removed zero-sized media files
  • Improved location history parsing for iOS 14 backups and file system images
  • Multiple Wi-Fi connection data improvements: removed duplicates, iOS 14 fixes
  • Latitude and longitude from EXIF data is now shown separately
  • Removed AppleDouble media files
  • Web plugin is now called “Web and History”

Visit https://www.elcomsoft.com/epv.html to learn more and try out the new version of Elcomsoft Phone Viewer.

Press & Media Contact:
Vladimir Katalov
ElcomSoft Co. Ltd.
Zvezdnyi blvd. 21, Office 615,
Moscow, Russian Federation
https://www.elcomsoft.com