Gatekeeper Password Storage: How Android Secures Devices

In our new white paper on Android 6.0 (Marshmallow) forensics, we talk a little bit about Gatekeeper password storage, a new-as-of-Lollipop feature designed to introduce a new level of obfuscation to PIN and pattern locks—both in file name and location, and in hash settings. In previous Android versions starting with 2.2, devices’ 4- to 16-digit … Continued

Demystifying Android Marshmallow Forensic Analysis

Mobile device encryption has been a headache for investigators ever since Apple introduced it with the iPhone 3GS and iOS 3.0. Since that time, encryption headaches have only accelerated, with Apple tying it to hardware (the A5 and later processing chips) and adding layers of data to its encryption. With Android in the game now … Continued

How to Solve Digital Forensics Challenges? Be Curious

A new Magnet Forensics white paper is coming soon, and while it focuses on the technical aspects of Android Marshmallow Forensics, running underneath those details is another theme: the only way to stay current on mobile device technology changes is to know how to get out in front of them. Yet few, if any, forensic … Continued

Digital Forensics: Artifact Profile – Google Chrome

APPLICATION NAME: Google ChromeCATEGORY: Web RelatedRELATED ARTIFACTS: Chrome Web History, Chrome Web Visits, Chrome Sync Data, Chrome Sync Accounts, Chrome Session/Tabs Carved, Chrome Last Tabs, Chrome Current Tabs, Chrome Last Session, Chrome Current Session, Chrome Top Sites, Chrome Logins, Chrome Searches, Chrome Keyword Search Terms, Chrome History Index, Chrome FavIcons, Chrome Downloads, Chrome Cookies, Chrome … Continued

Magnet AXIOM Now Supports Signal Forensics

Encrypted chat apps can be some of the hardest nuts to crack — especially when someone is trying to cover their tracks in advance — but they can also be vitally important to an investigation . Signal is a popular chat app with an emphasis on privacy. It uses encryption on in-transit data, and Magnet … Continued

Deep Dive on Portable Case Part 2

In part one of our Portable Case series, our Director of Forensics, Jessica Hyde, took a look at the features and benefits of Portable Case. She highlighted the power of real-time collaboration with multiple stakeholders and having all the feedback collected in one place. Read part one here. How to: Magnet AXIOM Portable Case for … Continued

Magnet AXIOM 1.0.10 Now Lets You Decrypt iOS 10.2 iTunes Backups

New version also includes faster PhotoDNA processing, and support for KakaoTalk and Zalo. Magnet AXIOM 1.0.10  is now available for download! AXIOM 1.0.10 will give users: Decryption of iOS 10.2 iTunes Backups — We’re always working on giving investigators the tools to keep up with the latest encryption found in Apple’s software. Now, you can … Continued