A Deeper Look at Magnet AXIOM’s Improved Hashing

One of the most obvious benefits of Magnet AXIOM is the access to the entire file system, as well as the hundreds of artifact types that the Magnet parsing and carving engine finds. To accommodate the larger data set and expanded access, we’ve improved the hashing functionality as well. If you are more familiar with … Continued

Why False Positives Are Important

Most forensic examiners are familiar with seeing false positives in their search or processing results. False positives will always be present in tools that conduct some form of data carving in their searching and/or processing. I often get questions from forensic examiners (both new and experienced) on whether the data that Magnet IEF or Magnet … Continued

Analyzing data with Centralized Views in Magnet AXIOM

This post will outline the various views that Magnet AXIOM lets you use in your investigations and provides tips and tricks on how to get the most out of AXIOM’s Centralized Views. Depending on the type of data you’re looking at, the presentation can really help with your analysis. Some views work really well with … Continued

Digital Forensics: Artifact Profile – Recycle Bin

Windows Recycle Bin in Digital Forensics The Windows Recycle Bin, a seemingly simple feature, has undergone significant changes across different versions of the Windows operating system. This artifact is not just a virtual trash can but a critical element in digital forensic investigations. Understanding its evolution and functionality can provide valuable insights into user activity … Continued

Digital Forensics: Artifact Profile – USB Devices

Importance to Investigators USB device history is an invaluable source of evidence in digital forensics, playing a crucial role in various investigative scenarios. When an examiner needs to determine if an external device was connected to a system, USB artifacts provide definitive traces of such activities. This evidence can reveal not only the connection but … Continued

July Artifact Update: Windows OS and More

We just released our July Artifact Update to Magnet IEF customers, which includes a number of new artifacts and improvements for previously supported apps. As part of this release, we wanted to improve support for Windows OS artifacts and integrate some popular customer requests. As a result, this update includes artifact support for the Recycle … Continued