In our first F-Response and Magnet AXIOM blog post (Using F-Response and Magnet AXIOM to Conduct Enterprise Investigations), we discussed set up and acquisition methods. Here we will discuss a specific use case: Targeted Acquisition. Even with decent network infrastructure, the bottleneck for a proper forensic investigation on a remote host will always be the … Continued
One major difference between law enforcement and corporate investigations is that corporate investigations may span across several countries or regions whereas LE typically deals with cases within their own city/state/region/etc. One of the challenges of corporate investigations is that you won’t normally have examiners in each of these locations so there is a requirement to … Continued
Multiple forensic methods may work for any one device, but what’s “recommended” may not always net more data; in fact, incorrectly applied methods could modify or wipe the evidence altogether. Do you know which is which? Each advancement in mobile forensics methods has occurred in response to a need to cope with rising evidence volumes … Continued
As data drifts further away from physical drives and more into the cloud, examiners have an ever-changing location to locate information. Instead of locating incriminating evidence on drives or SD cards, it can often be stored on services like Google, iCloud, and Dropbox— leading to a whole new set of challenges for examiners. That’s why … Continued
With Magnet AXIOM 1.1.3, we’ve not only made it easier for users to acquire and process images from mobile devices, but we’ve also brought improvements to our reporting capabilities — making the experience an even smoother one for stakeholders to use the evidence presented to them in their investigations. Find out more about what’s included … Continued
In a highly competitive market for digital forensics services, sometimes what makes the most difference is high quality software that helps you get the job done the right way—whether “the right way” means a flexible solution that travels with you, a tool that can obtain all the data that’s most germane to your case, or … Continued
In previous versions of Magnet AXIOM, you were required to unlock and enable USB debugging for Android device acquisitions or use Magnet ACQUIRE to load your own custom recovery images. Now, we’ve built this right into AXIOM, adding over 680 recovery profiles for Samsung devices with plans to add more in the future. Flashing a … Continued
New Magnet AXIOM Version Available Magnet AXIOM 1.1.1 is now available with the ability to create Custom Artifacts using Python — adding a new programming language to Custom Artifacts, in addition to previous support for XML. Offering support for Python, as well as XML, gives examiners at every level more options when building their own … Continued
New Artifact Exchange community allows examiners to upload and/or download artifacts made using Magnet AXIOM’s Custom Artifacts feature We have launched our Artifact Exchange! Forensics professionals can now share their Custom Artifacts with each other for use in their investigations. We have worked with our team and the community to launch the Artifact Exchange with … Continued
Mobile device encryption has been a headache for investigators ever since Apple introduced it with the iPhone 3GS and iOS 3.0. Since that time, encryption headaches have only accelerated, with Apple tying it to hardware (the A5 and later processing chips) and adding layers of data to its encryption. With Android in the game now … Continued
