Applies to Veriato Investigator
Article No: 28314158476567
Windows Recorder
November 13, 2023
Recording Updates (Browser, Chat, Email)
Added support for:
- Chrome versions up to 113.0.5672.127
- Chrome version 114.0.5735.134
- Chrome version 114.0.5735.199
- Chrome version 115.0.5790.99
New
Data Ingres, installation, and updates have been tested with the new Windows Agent.
- Device Rename – Renaming a device locally and restarting it automatically updates the device name at the server.
- Preventing Antivirus Detection – Temporary files required for a manual setup install of the agent are now placed in and run from folders that can be easily excluded (winipbin, winipbin-install, or winipdat). Running all processes from the main agent installation folder avoids ESET detection.
Enhancements
- Lock/Unlock – Added support for screen lock and unlock events.
- Active Time – To clarify active vs. focus time, an application’s active time is flushed on a change of user focus.
- Screenshots – Updated screenshot capture and data return methods. Continuous screenshot sessions are flushed at midnight for improved context mapping.
- Additional Logging – To verify operation and server communication, added event logs for creating a device, a new user login, on sending data to the server, and on requesting, receiving, or updating settings or the user profile.
- Profile Updates – Changed the profile exchange format. Device and user registration methods now include group information in profile exchanges.
- Client Check-in – Sends the device identification to the server.
- User Login – Returns the external IP and Remote Hostname to the server.
- Data Events – Now include the agent version, user, and device identification.
- Groups – Updated the identification method, and now allows group name customization.
- Keywords - Revised the method for requesting and updating keywords.
- Email Attachments – Instead of being sent separately, attachments are added as base64 to Email events.
Improvements
This version corrects many of the issues reported by customers, including:
- Time Zone – Ensured the UTC offset is correct for VM devices on creation or update.
- Record Settings –Record settings include only Skype and MS Teams, and the Chat Block options have been removed.
- Chat/IM – Teams recording has been verified on upgrade. Inbound Teams messages are captured.
- Document Tracking – CD/DVD and removable drives are captured by default. Added support for excluding System Files.
- Keystrokes – Now recorded in Chrome and in Notepad as expected.
- Keyword Alerts – Verified keywords detected and alert events recorded as specified by the user.
- Web Blocking – Web URLs are now blocked as requested in Chrome and Edge browsers.
- Browser Extensions – Updated extensions follow recording policy settings for email, chat, and file transfer capture. Changes to Chrome allow smooth upgrading, and the Firefox extension now installs using Registry key type REG_MULTI_SZ.
- Uninstall – The standalone uninstaller (provided by Support) removes all directories as expected.
- Gmail - Gmail inbound and outbound mail is captured as expected.
- Agent Operation – Fixed an issue causing an updated client to keep rebooting and where an agent process crashed on Windows 10 systems.