iLEAPP v2026.2.1
- Massive Biome artifact expansion: 60+ new streams added covering device power/lock state, location visit and app location activity, camera AutoFocus ROI, energy mode, boot session, emergency voice calls, emoji engagement, and a full Apple Intelligence family (including Safety Overrides), with several batches crediting research contributed by Mattia Epifani.
- New Signal for iOS support: full message and contact parsing, conversation view with attachments, and detection of Signal's timestamped GRDB directories.
- Expanded keychain handling: examiner-supplied keychain input, a lookup helper, a pure-Python SQLCipher reader, support for UFED encrypted keychain dumps, and reuse of a keychain already carried by the extraction.
- Notifications overhaul: attachments checked in as media, embedded payload images recovered, payload fields split into dedicated columns, and a fix stopping notifications from being reported three times over.
- Key fixes: addressBook empty-column pruning bug, MemoryError during HTML report generation, SQL identifier quoting and path-safe report names in the LAVA writer, several Timeline fixes, cloudkitSharing schema-skip handling, SMS chat rendering crash on missing attachments, and a Chrome bookmarks KeyError/index bug.
New Contributors
- @CynthiavDorp made their first contribution in #1748
- @JSap0914 made their first contribution in #1747
- @Sanjays2402 made their first contribution in #1772
- @sandrzejewskipl made their first contribution in #1790
Full Changelog: v2026.2.0...v2026.2.1
Contributors
CynthiavDorp, sandrzejewskipl, and 2 other contributors