Support for Incident Response
Now, when an *.l01 file imported from Endpoint Inspector contains volatile data, that data is recognized, and the appropriate processors run automatically. You can see the results on the Evidence Status view.
As always, when the device is selected in the SOURCES section of the Component list, you can see files in the Browser view. On the System view, the Volatile sub-view is new.
This new Volatile sub-view makes it easy to find, export, examine, tag, and report on various types of volatile data. Any screenshots acquired during volatile data collection may be seen in the Pictures sub-view of the Media view.
Improved Process for Updating License
The process for updating licenses for Inspector has been improved. The License Manager application is no longer used. Instead, licenses are managed within Inspector.
In the menu, click Help > Update Dongle License.
- If the computer has an internet connection, click Update License Automatically.
- If the computer does not have an internet connection, update the license manually by following the remaining instructions in the Update Dongle License dialog box.
For more enhancements and issues fixed in this release, a user guide, and a quick start guide, visit the MyCellebrite Portal