Download the latest version of software below.

RECON LAB 1.6.1 (B1) - Intel build

RECON LAB for Apple Intel has been updated to version 1.6.1 (B1). Check out some of the updates below!

Enhanced Email Parser

Our latest upgrade to RECON LAB has revamped our Email Parser function. Our new Email Parser will automatically parse all the .mbox and .emlx files that are present on a system in one unified view. Examiners can then search through Raw Data, tag highlighted sections, and add it to your report. It will also now automatically add any attachments associated with an email added to your report.

Log Viewer

We’ve added a brand new Log Viewer to RECON LAB, making it simple to analyze data from the logs that your imaging tool gathered. You can easily search through text based logs for keywords and tag data to add it to your reports later.

Unified Logs

We’ve also added a Unified Log viewer to parse one of the most valuable resources within macOS. Unified logs can contain extremely valuable artifacts and can help see what was going on behind the scenes. Make sure to try out this feature in your next case!

Hex Viewer

RECON LAB’s Hex Viewer has also received some improvements. Our improved Hex Viewer will help ensure you don’t miss even the slightest detail in your investigation by allowing you to view entire image containers in hex!

Other Enhancements:

  • RECON LAB now features a dependency check that will warn the user if the required dependencies are not installed and provide instructions on how to download them.
  • The application alerts the user when full disk access is not grantede.


Download our latest version of RECON LAB and try out our latest enhancements today.



Need help or want to chat about these new features? We’re happy to talk to you!

Phone: +1 302.570.0015

RECON LAB Version 1.5.0 (A1)

Release Notes:

  • macOS 12 Monterey Support is here!

The latest version of RECON LAB includes support for the latest release of macOS, Monterey!

RECON LAB 1.4.9 (A2) adds support for both ingesting images of macOS 12 and taking advantage of the performance enhancements of the operating system during processing!

  • Updated ‘Add Source Menu’ As part of our mission to improve the user experience of our tools, we’ve recently overhauled the ‘Add Source’ menu to make it more user-friendly!
Examiners will now see that the source menu is organized by the types of evidence you’re looking to add and organize them by how they were acquired and what formats they’re using.

RECON LAB now includes the ability to export case information and view it in a RECON CASE READER for simple review in the Windows environment!

Simply press the new Export Case button at the top of RECON LAB’s interface to export either a quick case containing preset artifacts and paths or a custom case to export tags and bookmarks!

  • Updated Support for AFF4 Images 

AFF4 images now have increased support in RECON LAB, allowing examiners to take full advantage of our suite’s advanced analysis and reporting features!

  • Unencrypted Cellebrite .Tar iOS Extraction Support

RECON LAB can now ingest unencrypted .tar extractions for analysis. Utilize RECON LAB’s macOS native plugins and reporting features for enhanced

  • Advanced Search Features for Email FilesAfter parsing files with email files, navigate to the Email Files section, and you’ll see the new Advanced Search window, allowing you to filter by subject, attachment, recipients, and more.
  • Advanced Search Features for Email Files

Examiners can now export Wi-Fi Location Artifacts as KML reports to import into a KML viewer of their choice.

  • Plugin Performance Enhancements
    • Mail
    • Outlook
    • Domain User Support
    • Brave Browser
    • Android Thumbnails
    • Music Library
    • Login Startup Items
    • SSH
    • Apple Dock
    • Installed Hardware
    • IOS Backup
    • Keyboard Shortcuts
    • Launchpad
    • Bash History
    • Connected iOS Devices
    • Printer Spool
    • Printer and Scanner
    • Network Interface
    • WiFi Locations
    • Music
    • Airport Wireless Network
    • Apple Installed Applications
    • Maps
    • Notifications
    • Reminder
    • Spotlight Settings
    • Screen Time
    • Time Machine
    • Escalated Privileges
    • Recent Items
    • Quarantine Events

Need help or want to chat about these new features? We’re happy to talk to you!

Email: Phone: +1 302.570.0015

Scroll to Top