https://cybertoolchain.io/tools/iped New releases and features in IPED, tracked by The Cyber Toolchain. en Sun, 29 Mar 2026 01:03:02 GMT https://github.com/sepinf-inc/IPED/releases/tag/4.3.1 https://github.com/sepinf-inc/IPED/releases/tag/4.3.1 Sun, 29 Mar 2026 01:03:02 GMT IPED 4.3.1 adds audio transcription in Telegram reports and improved 'lid' contact support for WhatsApp iOS and Android. • Adds audio transcription results to Telegram chat reports. • Supports 'lid' contacts in WhatsApp for iOS internal parser. • Improves 'lid' contacts support in WhatsApp for Android internal parser. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.3.0 https://github.com/sepinf-inc/IPED/releases/tag/4.3.0 Wed, 31 Dec 2025 22:48:40 GMT IPED 4.3.0 adds local/remote CSAM detection, age estimation, PhotoDNA for video, new AI tab, and dozens of new parsers and carvers. • Adds a remote task to classify CSAM images, integrating with a proprietary service/model. • Adds a local CSAM Detector powered by proprietary models for on-device classification. • Introduces age estimation for detected faces. • Supports input images containing multiple faces and enhances Face Recognition. • Extends PhotoDNA hash matching to video files. • Adds a dedicated 'AI' tab to the analysis GUI surfacing AI-powered results. • Renders and navigates to quoted/reply messages in chats decoded from UFDRs. • Delivers major improvements to UFED Chat decoding. • Supports decoding WhatsApp Status changes. • Adds an NSKeyedArchiver parser for Apple serialized data. • Adds a Plist and binary plist viewer. • Adds a carver for 7-Zip archives. • Adds additional carving signatures for MPG and MP4, plus new carvers for HEIC, WEBM, and MKV. • Validates checksums of possible cryptocurrency seed phrases found during analysis. • Adds a regex detector for TRON blockchain addresses. • Adds a regular expression for the Brazilian DANFE fiscal key. • Supports parsing Transmission BitTorrent client control files. • Stores small 'view' files directly in the database for faster access. • Optimizes processing queue ordering for improved throughput. • Upgrades the Telegram decoder plugin. • Updates German, Spanish, Italian, and French translations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.2.1 https://github.com/sepinf-inc/IPED/releases/tag/4.2.1 Mon, 21 Apr 2025 22:06:05 GMT IPED 4.2.1 improves MP4, HEIC, and OFX detection and adds Spanish, Italian, German, and French UI translations. • Improves detection accuracy for audio/mp4 and video/mp4 file types. • Upgrades ImageMagick for better HEIC image support. • Upgrades Telegram decoder plugin to version 1.0.13. • Adds updated UI translations for Spanish, Italian, German, and French. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.2.0 https://github.com/sepinf-inc/IPED/releases/tag/4.2.0 Mon, 30 Dec 2024 21:15:31 GMT IPED 4.2.0 adds Whisper transcription, Filter Manager, Threema/APK/OFX parsers, French UI, and 20+ new forensic capabilities. • New Filter Manager UI for managing and applying evidence filters. • New transcription engine powered by OpenAI Whisper for audio/video content. • New Excel-style column header filter in the results table. • French language translation added to the UI. • New parser for Threema Secure Messenger files. • New utility tool to scan a folder of cases and export files matching a search query. • Improved support for UFDR files created by Cellebrite Physical Analyzer 8+. • Show and navigate to quoted (replied-to) WhatsApp messages inline. • New Google Chrome Cache parser. • New carver for .torrent and resume.dat files. • New resume.dat entries carver and parser. • New Open Financial Exchange (OFX) file parser. • New APK (Android application package) parser. • New Shareaza download file parser. • New carver and file signature support for Shareaza .sd download control files. • Colored Bookmarks for categorizing and visually distinguishing tagged items. • Improved PDF file format carving. • Import keyword lists directly as Bookmarks. • Extracts additional thumbnails from WhatsApp databases. • Handles additional WhatsApp message types. • Support for new WhatsApp Android database format. • Support for new Telegram versions on iOS. • Support for new Telegram versions on Android. • Keystroke-to-bookmark association can now be removed. • Map view updates are delayed while visible to improve performance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.1.6 https://github.com/sepinf-inc/IPED/releases/tag/4.1.6 Fri, 05 Apr 2024 04:39:36 GMT IPED 4.1.6 adds a `skip.authors` and `include.labels` to `.hacktron/config.yaml` to control which pull requests get scanned • Show warning in GUI for each evidence processed unsuccessfully Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.1.4 https://github.com/sepinf-inc/IPED/releases/tag/4.1.4 Wed, 16 Aug 2023 23:01:17 GMT IPED 4.1.4 adds parsing for LZFSE iCloud backups, iLBC audio, and macOS .partial.emlx attachments. • Adds `Support parsing LZFSE compressed files from iCloud backups` • Adds `Support parsing MacOS XXXXX.partial.emlx emails attachments` • Adds `Support iLBC (Internet Low Bitrate Codec) audios` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.1.3 https://github.com/sepinf-inc/IPED/releases/tag/4.1.3 Fri, 30 Jun 2023 22:42:42 GMT IPED 4.1.3 adds WhatsApp reaction support, Emule .part.met carving, and automatic export to local case when MinIO is enabled. • `WhatsApp reactions` are now supported in parsed chat data • New `Emule *.part.met files carving` capability for file recovery • Added automatic export of items to the local case when both `enableAutomaticExportFiles` and `enableMinIO` are enabled Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.1.2 https://github.com/sepinf-inc/IPED/releases/tag/4.1.2 Mon, 17 Apr 2023 19:18:41 GMT IPED 4.1.2 adds WhatsApp audio/video call decoding for Android databases v2.22.8+ and improves temp file cleanup. • Adds support for decoding audio and video calls from android WhatsApp databases v2.22.8+ • Changes IPED to delete temporary DLLs and the entire temp folder after processing Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.1.1 https://github.com/sepinf-inc/IPED/releases/tag/4.1.1 Tue, 14 Mar 2023 19:41:09 GMT IPED 4.1.1 adds a Referenced items tab and fixes audio transcription dependencies • Adds a new tab to list Referenced items in the GUI. • Converts audios to WAV format during transcription service processing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.1.0 https://github.com/sepinf-inc/IPED/releases/tag/4.1.0 Fri, 17 Feb 2023 21:10:52 GMT IPED 4.1.0 adds Windows EVTX and Discord cache parsing, wav2vec2 audio transcription, timeline filters, and map track rendering. • Adds Timeline chart filtering based on date ranges to show item counts • Adds new local/remote audio transcription using Facebook wav2vec2 and transcription cluster service • Adds Windows Mail App parser • Adds Discord cache files parser • Adds new Windows EVTX parser to extract events timestamps • Adds support for importing NIST NSRL RDS version 3 format • Adds ability to render tracks on the Map tab • Adds extraction of Telegram deleted groups • Adds P2P (Emule, Shareaza, Ares) history entries as separate items in case • Adds option to extract video frames as a function of video duration • Adds search capability for Vendors and Products Identifiers for Hardware Wallets • Adds categories for other types extracted from UFDRs • Adds Image blur and gray filters in gallery and image viewer • Adds file type icons rendering on user interface • Adds Visual Enhancements in Processing UI • Adds RegRipper Custom Reports Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.0.0-final https://github.com/sepinf-inc/IPED/releases/tag/4.0.0-final Fri, 15 Jul 2022 17:24:13 GMT IPED 4.0 adds NIST CAID hash dataset support • Adds `NIST CAID` (Child Abuse Image Database) hash dataset support for digital forensics investigations Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/4.0.0-beta https://github.com/sepinf-inc/IPED/releases/tag/4.0.0-beta Fri, 24 Jun 2022 22:53:32 GMT IPED 4.0 beta adds face recognition, local audio transcription, object storage via MinIO, hierarchical config profiles, and WhatsApp chat recovery. • Adds `Face recognition` functionality for identifying individuals in images. • Introduces `Centralized hash database` with unified lookup supporting NSRL, ProjectVic, LED, PhotoDNA, and CSV formats. • Adds support for the `Interpol ICSE CSAM hash database` for centralized hashing lookups. • Enables `Local audio transcription [Experimental]` to process audio files natively. • Implements `Unified Timeline Table View` with new event filtering capabilities. • Adds recursive processing support for `forensic/virtual disk images`. • Extends OCR engine to handle `HEIC, PSD, WEBP, WMF, EMF, SVG, JBIG2` and other non-standard image types. • Integrates mapping via `OpenStreetMaps/Bing maps using Leaflet library`. • Adds capability to `Recover deleted WhatsApp Chats, Messages and Contacts`. • Supports parsing WhatsApp data up to version `2.22.9`. • Links `WhatsApp attachments` within Apple Warrant Returns Cellebrite Reports. • Adds support for merging `Whatsapp Android backups`. • Enables downloading and decoding of `WhatsApp attachments` directly. • Introduces `Object Storage Module` leveraging `MinIO` for data storage operations. • Upgrades to Sleuthkit `4.11.1`, enabling support for APFS unallocated areas. • Updates LIBVMDK to support `splitted and differential images`. • Updates LIBVHDI to support `vhdx evidences`. Breaking changes: • The migration from version 3.18 to 4.0 requires following the official Migration Guide due to structural changes. • The Public API has undergone breaking changes requiring translation updates to English. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/3.18.15 https://github.com/sepinf-inc/IPED/releases/tag/3.18.15 Mon, 06 Jun 2022 20:02:18 GMT IPED 3.18.15 adds Telegram v8.5-8.7 support, UFDR base64 decoding, and date format parsing • `#1064`: Adds support for decoding Telegram versions 8.5 through 8.7. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/3.18.13 https://github.com/sepinf-inc/IPED/releases/tag/3.18.13 Tue, 15 Feb 2022 13:18:19 GMT IPED 3.18.13 adds Telegram 8.4 support, external attachment viewing by detected extension, and SQLite cleanup for ignored subitems. • Adds `telegram` version 8.4 protocol support to the parser engine • Enables opening attachments from EML/MSGViewer externally using the detected file extension (previously relied on static mapping) • Introduces automatic deletion of ignored subitem data from SQLite containers during processing Breaking changes: • Resuming a processing job started in a previous IPED version is now prohibited; cases must be appended via the UI or multicase creation. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped https://github.com/sepinf-inc/IPED/releases/tag/3.18.10 https://github.com/sepinf-inc/IPED/releases/tag/3.18.10 Fri, 03 Dec 2021 14:32:58 GMT IPED 3.18.10 adds thumbnail generation for PDFs and LibreOffice formats, plus eMule artifact parsing • `Create thumbnails` now supports PDF documents, enabling visual previews of PDF pages in the GUI without opening the file. • `Create thumbnails` extends to all formats supported by LibreOffice (ODT, ODS, etc.), allowing quick visual inspection of office files. • New parsing support for eMule `part.met` files extracts metadata from these specific p2p artifacts. • New classification and parsing for `preferences.ini`, `AC_SearchStrings.dat`, and `preferences.dat` eMule configuration artifacts to extract user settings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/iped