Our previous two blogs covered the reasons why we think file system forensics’ marginal returns are rapidly diminishing, and the changes in consumer electronics that continue to drive the need for a focus on artifacts and the apps they come from in digital forensics. In our final post, we’re discussing how the artifacts-oriented approach allows … Continued
The latest version of Magnet AXIOM is ready for customers to download either at the Customer Portal or when you open AXIOM. Magnet AXIOM 1.2.6 brings improvements to Cloud acquisition — including support for Google Hangouts — as well as an update to our Passware integration that uses a password dictionary list to attempt to … Continued
Our previous blog covered the reasons why we think file system forensics’ marginal returns are rapidly diminishing, and why we think the process needs to be balanced with a more efficient, artifacts-oriented approach that relies on the file system to verify and validate. In this blog, we offer the historical context for how we think … Continued
Digital forensics has relied on the file system for as long as hard drives have existed. The structures associated with File Allocation Tables (FAT), the New Technology File System (NTFS), Extended File System (EXT), and other file systems—as well as the partitions within—could be mined for file metadata, carved for deleted files, and accessed to … Continued
Magnet AXIOM supports many different services and platforms in its cloud product from Google, Microsoft, Facebook, Twitter, Dropbox, and many more. We also include a generic POP/IMAP connector to allow examiners to pull additional email services not explicitly included in the regular cloud providers. As long as the webmail provider supports either POP or IMAP, … Continued
There is a current misconception by many in the mobile forensics field that every acquisition method conducted on a mobile phone is specific to that model. Quite often, I will get requests from examiners asking for a list of mobile devices our tools support. I will often reply with a list of the models we … Continued
As a continuation of our series around analyzing mobile images in multiple tools, this blog is going to focus around using images created by MSAB XRY. For more information around the multi-tool approach and other image formats, see our intro blog here. MSAB XRY creates both physical and logical forensic images in a proprietary format … Continued
As a continuation of our blog series around using multiple tools to be successful in your forensic investigations, this post is going to look at loading images from Oxygen into AXIOM. You can read the intro blog here which will also link to others in the series. Oxygen allows you to archive extraction and case data … Continued
Customers can now get the latest version of Magnet AXIOM over at the Customer Portal! Magnet AXIOM 1.2.3 improves smartphone acquisition, provides innovative new time filtering capabilities, enhancements to AXIOM Examine and AXIOM Cloud, offers new artifacts, and adds language support for Chinese (traditional) and Korean. Smartphone Acquisition Improvements With this release, we’ve worked hard … Continued
Recently, Magnet Forensics and Passware partnered to offer full disk decryption in Magnet AXIOM. AXIOM now includes seamless integration with Passware decryption technology, which supports full disk decryption with a known password for BitLocker, TrueCrypt, PGP Desktop encrypted devices, and others. The full Passware Kit Forensic, with additional features, is also available for purchase. For … Continued
