Magnet Axiom Cyber 7.8: Higher resolution timestamps, enhancements to Email Explorer and teams data collection!
We’re excited to announce that the latest version of Magnet Axiom Cyber is now available!
In this release, we’ve made several enhancements to streamline your workflow and uncover insights faster, including:
- Higher resolution timestamps with millisecond precision
- New markup viewer for Email Explorer
- Teams client credential authentication
We’ve also updated and added to our artifact support (updates are at the end of this blog.)
Check out the release notes here for a complete summary of all updates made in this release.
Upgrade to Axiom Cyber 7.8 within the Axiom Cyber interface or through the Customer Portal.
Haven’t tried Axiom Cyber yet? Request your free trial here.
Higher resolution timestamps with millisecond precision
In any investigation, digital forensic examiners must address key questions, including the pivotal “when” and “how.” Precise timestamps play a vital role in answering these questions, whether by constructing timelines, correlating events, or connecting relationships between various actions and users.
But when some events occur at machine speed, a lot can happen in just one second!
Now, millisecond-precise timestamps are supported throughout Magnet Axiom and Magnet Axiom Cyber as well as all artifacts where millisecond data is available, such as in Timeline, Connections, and log entries. Ultimately this enables you to quickly analyze chronologically sorted artifacts with improved accuracy.
To learn more about this enhancement, check out the blog post “Improve investigation accuracy with higher timestamp resolution” and check out an interactive demo here:
New markup viewer in Email Explorer
In the 2023 State of Enterprise DFIR Report, business email compromise was identified as one of the top three ways that organizations were becoming a victim of a data breach. This happens when an attacker pretends to be a trusted contact or entity to trick recipients into clicking malicious links in an email to either expose sensitive information (such as login credentials) or to install malware.
With the new Markup Viewer in Email Explorer, you can easily view the header and HTML or XML source code of an email to quickly uncover malicious URLs due to a phishing, or business email compromise, attack. The Markup Viewer preview card is supported for all email artifacts that have an HTML or XML source.
Teams client credentials authentication
We’re building on our cloud acquisition capabilities with an enhancement to our Teams collection workflow! Now, you can authenticate and access data with client credentials from Teams, in addition to Microsoft 365. If your organization’s data access control policy prohibits the use of an account’s username and password to authenticate and access data, upgrade now and use client credentials instead to meet your organization’s security, privacy, and compliance policies while collecting the comprehensive cloud data you need for your investigations.
Also, we’ve improved the overall ease of use and speed of the workflow. Now, you can acquire multiple accounts at once (as opposed to creating separate cases for each collection) resulting in significant time savings as the number of users or custodians involved in your investigation increases. Additionally, you can expect faster download speeds (less throttling) with this method of authentication, and we’ve improved the UX.
Client credentials are configured in Azure and can be set up with read-only access with the option to choose what data can be accessed. You can also set client credentials to expire if governance rules require time-limited access to data. Learn how to set up client credentials in Azure in our knowledge base article “Sign in to Microsoft using Client Credentials” (Support Portal login required.)
New and updated artifacts
This release includes new and updated artifacts to recover important data from SEGB v2 databases in iOS 17 and new artifacts to support drone forensics:
New artifacts
- Discord Channels and Servers (Android)
- DJI Flight Logs (iOS & Android)
- Spotlight Searches (iOS)
Updated artifacts
- iMessage/SMS/MMS (iOS)
- Telegram Messages and Users (iOS)
Get Magnet Axiom Cyber 7.8 today!
Download Axiom Cyber 7.8 over at the Customer Portal or upgrade within the application.
Haven’t tried Axiom Cyber yet? Request your free trial here.