By Jad Saliba, Founder & CTO of Magnet Forensics It’s almost been two years since we released Magnet AXIOM v1.0, and it’s been quite the ride since that release day! AXIOM was created primarily because we were looking to add more functionality to IEF — but IEF was based on a platform that was reaching … Continued
In digital forensics, demonstrating attribution—using operating system artifacts to prove that the suspect had knowledge of the document or image files found on a device—is one of the key elements of building a case. The ability to tell an evidentiary story is even better. How did a file get here? Where did it go—to whom … Continued
The latest version of Magnet AXIOM is ready for customers to download either at the Customer Portal or when you open AXIOM. Magnet AXIOM 1.2.6 brings improvements to Cloud acquisition — including support for Google Hangouts — as well as an update to our Passware integration that uses a password dictionary list to attempt to … Continued
Samsung devices are one of the most popular device types on the most popular mobile operating system, Android. In the case of a recent examination, a Samsung was giving me a lot of trouble. It was a Verizon Samsung Galaxy S7, SM-G930V. This phone was released running Android version 6, or Marshmallow, and upgradable to … Continued
Update: An updated version of this release is now available as Magnet AXIOM 1.2.5. Magnet AXIOM 1.2.4 is now available for customers to download in the Customer Portal. With the latest release of AXIOM, we’re bringing new capabilities to bypass Android passwords, full Cloud token integration, McAfee Decryption, and more. Mobile Acquisition Improvements With AXIOM … Continued
Magnet AXIOM supports many different services and platforms in its cloud product from Google, Microsoft, Facebook, Twitter, Dropbox, and many more. We also include a generic POP/IMAP connector to allow examiners to pull additional email services not explicitly included in the regular cloud providers. As long as the webmail provider supports either POP or IMAP, … Continued
In January, we released the AXIOM Wordlist Generator free tool and described in our white paper the changes to the Microsoft® Windows® 10 login workflow that affected password cracking practices. The login workflow was far from the only change in this anniversary update, however. In this blog, Training Director Jamey Tubbs describes other Windows operating … Continued
As a continuation of our series around analyzing mobile images in multiple tools, this blog is going to focus around using images created by MSAB XRY. For more information around the multi-tool approach and other image formats, see our intro blog here. MSAB XRY creates both physical and logical forensic images in a proprietary format … Continued
As a continuation of our blog series around using multiple tools to be successful in your forensic investigations, this post is going to look at loading images from Oxygen into AXIOM. You can read the intro blog here which will also link to others in the series. Oxygen allows you to archive extraction and case data … Continued
The June 2017 Trustwave Global Security report indicated that although the time to detect intrusion had improved—from 80.5 days in 2015 to just 49 days in 2016—the time from detection to containment rose slightly, and the time from intrusion to remediation remained roughly the same: just over 60 days. Indeed, incident response continues to be … Continued
