Belkasoft announced the release of Belkasoft X version 2.11, delivering major advancements in AI-assisted analysis, mobile and cloud acquisition, and artifact extraction capabilities.
The new release introduces topic detection with BelkaGPT—a new addition to Belkasoft’s AI toolkit—while extending iOS agent-based acquisition support through iOS 18, adding new and updated cloud acquisition methods, and deepening artifact extraction coverage.
AI-Assisted Investigations with Smarter Contextual Analysis
A key innovation in version 2.11 is topic detection in chats through BelkaGPT, Belkasoft’s offline AI assistant. Rather than manually sifting through conversation data, investigators receive automatically grouped results organized around predefined themes—financial activity, drugs, operational coordination, account access, and other common investigative points of interest. Investigators can also define their own topic detectors, turning their specific investigative focus into automated search criteria that BelkaGPT then applies across all conversations.
Unlike traditional keyword-based approaches, BelkaGPT’s large language model can recognize indirect references and multilingual conversations without requiring extensive keyword lists or pre-translation workflows.
“DFIR labs are routinely asked to do more with less—more data, more case complexity, more pressure—but rarely more headcount. BelkaGPT is our answer to that: features like topic detection, as well as picture analysis and speech recognition, take the volume work off analysts so they can focus on what actually requires human judgment.”
— Yuri Gubanov, the CEO of Belkasoft
BelkaGPT Q&A assistant has also been significantly enhanced. It now offers:
- Unlimited artifact references in AI-generated answers
- Improved handling of natural-language time references, including earliest and latest event queries
- Automatic language detection for chats and documents
- Improved artifact reference visualization for easier evidence verification
These updates allow investigators to navigate large datasets more efficiently while maintaining direct traceability back to evidence sources.
Expanded Acquisition Capabilities Across Mobile and Cloud Sources
The updated iOS agent-based acquisition method now supports devices running iOS 17 and iOS 18–18.7.1, enabling partial file system extraction with extensive third-party application coverage, media collection, and access to valuable native application data.
On the cloud acquisition side, Belkasoft X introduces a new Telegram cloud acquisition workflow that leverages existing active Android sessions to bypass common authentication obstacles such as inaccessible verification codes or unknown 2FA passwords.
Microsoft 365 (OneDrive) acquisition has been redesigned around Microsoft’s native authentication workflow, enabling support for the full range of modern 2FA methods. In parallel, Belkasoft X acquisition workflows for Google Drive, Gmail, Google Keep, Google My Activity, and Android WhatsApp backups have been updated to accommodate recent protocol changes introduced by Google and WhatsApp.
Deeper Visibility into Evidence Sources
Belkasoft X v2.11 further expands forensic visibility through improved artifact extraction and SQLite database analysis.
The platform now automatically detects SQLite databases within evidence sources, allowing investigators to browse and query unsupported application data directly through the built-in SQLite viewer.
Artifact extraction improvements cover a broad range of mobile apps and system services, including Google Timeline location history on Android, Instagram group chats, Signal attachment decryption, Snapchat reactions, and Telegram secret chat participant visibility. Extraction from Facebook Messenger, X (formerly Twitter), AllTrails, Apple Health, and other sources has also been improved.
The release also enhances Magnet Axiom case import support by expanding imported artifact coverage, enabling richer AI-assisted analysis when working with external case files.
Scalable AI Processing with BelkaGPT Hub
BelkaGPT Hub now supports speech-to-text conversion for audio and video evidence, allowing forensic teams to offload compute-intensive AI processing to dedicated local infrastructure while maintaining fully offline workflows and eliminating external data transfers.
Digital Forensics Software for Modern Investigative Challenges
With version 2.11, Belkasoft X continues to strengthen its position as a comprehensive DFIR platform designed to help investigators process more data, alleviate the manual review effort, and accelerate evidence discovery in modern investigations.
For more information about Belkasoft X 2.11, visit Belkasoft’s Official Website.
