Elcomsoft Phone Breaker 9.70 extends support for Microsoft account extraction, adding the ability to download OneDrive files and activities from the Windows 10 Timeline. Elcomsoft Phone Viewer is also updated to support new data types extracted from Microsoft accounts, and resolves a number of previously reported issues.

Elcomsoft Phone Breaker 9.70 extends support for Microsoft account extraction, while Elcomsoft Phone Viewer fixes a number of issues reported in prior releases. The update adds the ability to download OneDrive files and extract and analyze activities from the Windows 10 Timeline. The complete list of improvements and fixes is available in the Release Notes below.

Extracting Windows Timeline

Windows Timeline is a feature that first appeared in the Windows 10 April 2018 Update. The feature enhances Task View to display history of the user’s past activities. The Timeline contains historical information about the user’s launched applications, searches, documents and Web browsing history. Along with Windows jumplists, the feature is little known and rarely disabled, giving a valuable insight into the history of system’s usage. In addition, Account Activity (account sign-in) data is extracted.

If the user signs into their Microsoft account, Windows synchronizes the Timeline across devices. Elcomsoft Phone Breaker 9.70 and Elcomsoft Phone Viewer 5.30 add support for Timeline data, enabling experts access timestamped information about the app usage and Web page visits.

OneDrive and Personal Vault extraction

Elcomsoft Phone Breaker 9.70 and Elcomsoft Phone Viewer 5.30 can now download files from the user’s OneDrive storage. The downloaded files include the content of OneDrive Vault, which is a protected cloud storage for keeping the most sensitive kinds of information. In addition, the tool can obtain metadata for files that have been recently deleted from OneDrive.

Now supporting the widest range of data in multiple cloud services, Elcomsoft Phone Breaker becomes truly indispensable for cloud analysis.

Elcomsoft Phone Breaker

• Improved authentication into Microsoft accounts
• Downloads additional data from Microsoft accounts (Apps & services timeline, recent OneDrive file list)
• Downloads files from OneDrive

Elcomsoft Phone Viewer

• Added support for new data in Microsoft accounts (Apps and services, recent OneDrive files list, OneDrive files)
• Removed zero-sized media files
• Improved location history parsing for iOS 14 backups and file system images
• Multiple Wi-Fi connection data improvements: removed duplicates, iOS 14 fixes
• Latitude and longitude from EXIF data is now shown separately
• Removed AppleDouble media files
• Web plugin is now called "Web and History"