Yes. We examine artifacts from encrypted apps where recoverable data exists.