Magnet AXIOM 5.3: Introducing Twitter Warrant Return Support
We’re proud to announce the availability of Magnet AXIOM 5.3!
You can upgrade to the latest version of AXIOM & AXIOM Cyber within AXIOM & AXIOM Cyber or over at the Customer Portal.
With AXIOM 5.3, we are introducing support for Twitter warrant returns, adding to our existing lineup of warrant return support, including Apple, Facebook, Google, Instagram, Snapchat, and Skype. Plus, with 5.3, we’re adding even more upgrades for the Media Explorer, including keyword global filtering and improved media review capabilities.
In case you missed it, with AXIOM 5.2 we released beta functionality, called Project Prague™. This new feature introduces the concept of cross-case searching for tagged identifiers and analytics. As with the previous release for AXIOM, these features and updates help to streamline the workflow of examiners and decrease time to evidence during investigations.
If you haven’t tried AXIOM or AXIOM Cyber yet, request a free trial here.
Twitter Warrant Returns
With AXIOM 5.3, we’ve now added Twitter warrant return support to AXIOM, adding to our existing lineup of supported warrant return providers, such as Apple, Facebook, Google/Gmail, Instagram, Snapchat, and Skype.
With Twitter Warrant Return support, AXIOM will allow examiners to analyze:
- Tweets
- Direct Messages
- User Data
- Plus, more Twitter Artifacts
Active Twitter users have grown considerably over the last four years, from 109 million quarterly average users (QAU) in Q1 2017 to 199 million QAU in Q1 2021. With the increase of platform use and user adoption, there’s certainly more opportunities to examine Twitter warrant returns.
The support for Twitter warrant returns adds to the broader support AXIOM provides for Twitter data analysis, as examiners can also acquire public-facing Twitter data, and live cloud acquisitions with a user’s login credentials.
To learn more about examining Twitter Warrant Returns in AXIOM, read the blog “Examining Twitter Warrant Returns with AXIOM” by Kim Bradley.
For more insight into Warrant Return analysis in Magnet AXIOM, check out the blog series by Jessica Hyde.
Even More Capabilities for the Media Explorer
With the Media Explorer, examiners can now streamline their searches even further and review media more easily with:
- Global Keyword Filter
- Improved Media Review Capabilities
The new global keyword filter allows examiners to quickly filter to specific media content in the Media Explorer based on known media naming conventions, common search terms, and/or case-specific information. Examiners could already filter by global keyword to locate media in the artifact view, but with media intensive cases, the filtering option built right into the Media Explorer will help to streamline workflows significantly.
With AXIOM 5.3, we’re improving one of the media review capabilities in the Media Explorer. Now, in addition to the hover-over video preview available in the Media Explorer, AXIOM 5.3 adds the ability to scroll through the video content directly from the thumbnail to help accelerate video review.
Read more about media explorer and check out the how-to video with Trey Amick in his blog, “Media Explorer in Magnet AXIOM“.
In Case you Missed it: Project Prague Beta Released in 5.2
For large-scale investigations, crime analysis, and intelligence gathering, cross-case sharing of information can be hugely beneficial. For example, if you were looking to identify the serial number of a camera across cases in an ICAC investigation, our new beta feature, Project Prague, would allow you to do so. If you were looking for a specific username in a drug or weapons investigation across cases, Project Prague would be a great fit.
This cross-case sharing of information is one way in which we’re looking to help support our users, and while we’ve introduced beta functionality in Magnet AXIOM (and Magnet AXIOM Cyber for that matter, too), we are looking for critical feedback. Project Prague beta currently includes cross-case searching for tagged identifiers (e.g., names, emails, screen names, serial numbers, etc.) and analytics, but your feedback can help inform the final design. Some of the current key features of the Project Prague Beta include the ability to:
- Push specific identifiers of interest to a user-controlled Prague database
- Track instances of identifiers across different cases
- Query all identifiers in a case so they can be matched to identifiers of interest in Prague
- Tag all hits relating to the matching identifier in a current case
- Create a report outlining all details for matched identifiers and contact information for each
If you’re interested in testing out this new beta feature and providing your feedback, visit the Magnet Idea Lab™ and request access.
You can also read up more about Project Prague in “Cross-Case Searching for Tagged Identifiers in Project Prague Beta” or watch this how-to video to see it in action.
New Artifacts
- Google Photos Albums // Android
- Google Photos Comments // Android
- Google Photos Media // Android
- Samsung Health Steps // Android
- WEBP parsing and carving // Windows
Updated Artifacts
- Apple Wallet
- EML(X)
- Hangul
- Facebook Messenger Messages
- Signal
- Slack
- SMS / MMS (content provider)
- TextPlus
- User Word Dictionary
- Yahoo! Webmail
- Zello
Get Magnet AXIOM 5.3 today!
We are continually improving AXIOM to make it our most comprehensive digital forensic platform. When every second counts, it’s important that we do what we can to streamline the primary workflow of examiners. We’re excited that the improvements with AXIOM 5.3 can help do exactly this.