Why False Positives Are Important

Most forensic examiners are familiar with seeing false positives in their search or processing results. False positives will always be present in tools that conduct some form of data carving in their searching and/or processing. I often get questions from forensic examiners (both new and experienced) on whether the data that Magnet IEF or Magnet … Continued

Analyzing data with Centralized Views in Magnet AXIOM

This post will outline the various views that Magnet AXIOM lets you use in your investigations and provides tips and tricks on how to get the most out of AXIOM’s Centralized Views. Depending on the type of data you’re looking at, the presentation can really help with your analysis. Some views work really well with … Continued

Magnet AXIOM Adds Forensic Support for Uber

Since its launch, Uber has become a popular alternative to taxi rides in many cities globally. As Uber is controlled through a mobile app, it only makes sense to add support for it in Magnet AXIOM and Magnet IEF. With the launch of AXIOM 1.0.4 and IEF 6.8.1, we’ve added support to parse data from … Continued

Connecting the Dots Between Data and its Source: Source Linking

One of the new features in Magnet AXIOM that we are most excited about is Source Linking. This key feature should really help forensic examiners dive deeper into their data and analyze evidence quickly and efficiently. In a nutshell, Source Linking allows an examiner to quickly navigate between the artifacts, file system, and Windows Registry … Continued

Welcome to Magnet AXIOM!

By Jad Saliba, Founder and CTO of Magnet Forensics Today we launched Magnet AXIOM! (View Press Release) Our team has been working hard to create a complete digital investigation platform that builds on the processing power of Magnet IEF, and I’m excited to announce that it is now available to the digital forensics community. AXIOM … Continued

Forensic Analysis of Prefetch files in Windows

This is the fourth blog post in a series of five about recovering Business Applications & OS Artifacts for your digital forensics investigations.   What are prefetch files? Prefetch files are great artifacts for forensic investigators trying to analyze applications that have been run on a system. Windows creates a prefetch file when an application is … Continued