Artifact updates

Android

Facebook Contacts

Signal Conversations

Signal Messages

Snapchat Chat Messages

TikTok Videos

Cloud

Google Takeout - Semantic Location History - Activity Segment NEW

Google Takeout - Semantic Location History - Place Visit NEW

iOS

Apple Mail

iMessage/SMS/MMS

Instagram Profiles

Signal Stories NEW

Snapchat Chat Messages

TikTok Videos

Windows

KakaoTalk

Microsoft Teams Topic Messages

Tor URLs

USB Devices

Hash Sets Manager is now available on the Support Portal

Hash Sets Manager is now out of beta and available to download for free when you log in to the Support Portal.

Integrate Hash Sets Manager with AXIOM so that you can sync hash sets in your case across your organization.
To learn more and download Hash Sets Manager, visit the Free Tools section on the Support Portal: https://support.magnetforensics.com/s/free-tools.

You can now select from a history of the five previous date/time filters in your case when you filter on date/time in AXIOM Examine.

Google Takeout - Semantic Location History - Activity Segment | Cloud: Added support to include Activity Segment.
Google Takeout - Semantic Location History - Place Visit | Cloud: Added support to include Place Visit.
iMessage/SMS/MMS | iOS: Added carving support for edited, unsent, and missing texts, added carving support to acquire the Chat ID, and updated carving support to improve performance.
Instagram Profiles | iOS: Updated support to acquire the Profile Picture URL. [v262.0]
KakaoTalk | Windows: Updated support to include pictures and attachments in conversation view.
Microsoft Teams | Windows: Updated support to include topic and space name.
Signal Conversations | Android: Added support for Signal Conversations. [v6.5.6]
Signal Conversations, Signal Messages | Android: Updated parsing support for Signal Conversations and Messages. [v6.5.6]
Signal Stories | iOS: Added support for Signal Stories. [v6.0]
Snapchat Chat Messages | Android: Updated support to acquire multiple attachments from one chat message. [Android 12, Snapchat v12.12.0.38]
TikTok Videos | Android, iOS: Updated support to include recorded audio and sound.
TikTok Videos | Android: Added support for cached TikTok Videos. [v26.9.4]
Tor URLs | Refined Results: Updated parsing support to exclude non-Tor .onion URLs.

AXIOM Process is now able to capture Activity Segment and Place Visit from Google Takeout - Semantic Location History.

AXIOM now supports loading VMDK flat-type segment files without a corresponding descriptor file.
AXIOM can now recover metadata for exFAT deleted files.
When acquiring or loading an encrypted iOS image, the decrypted image will be written to a container and processed as an image.
Added logging to indicate when artifacts matching TAG KNOWN FILES WITH MATCHING HASH VALUES are excluded from the Artifacts Explorer because UTC date values are outside of the applied Date range filter.

The plist preview is now displayed in the Artifacts explorer similarly to how it is displayed in the File system explorer.
When you apply a date/time filter to evidence, you can now select from a history of the last five date/time filters in your case.

Hash Sets Manager is now available to download from https://support.magnetforensics.com/s/free-tools.

Artifacts matching TAG KNOWN FILES WITH MATCHING HASH VALUES will be excluded from the Artifacts Explorer if UTC date values are outside of the applied Date range filter. -ENGN-152
Improved Date range filter to ensure only UTC date stamps are used to filter results. -ENGN-416
Previously, if a .tar contained a folder and a file of the same name, only one of the items would be processed. -ENGN-514
Sometimes, when opening a case, AXIOM would crash. -EXM-1389
When exporting evidence from AXIOM Examine to Magnet REVIEW, the user-specified temp file location wasn't being used, and memory was being used up in the default temp file location, causing the export to fail. -EXM-1775
Sometimes, Apple Mail attachments weren't appearing in AXIOM Examine. -MARS-605
Cloud Google Location History | Cloud: Updated to display Activity Confidence Scores in UTC. -CA-753
Previously, authenticating an Apple account that did not require 2FA may have timed out. -CA-721
Improved parsing of timestamp values for Cloud Google Location History. -CA-909
Previously, AXIOM was unable to acquire Apple accounts using username and password when 2FA was enabled. -CA-713
Previously, Slack may have presented an empty screen after providing the 2FA code. -CA-671
Previously, the Apple warrant return tool could experience errors when processing .zip files containing duplicate entries. -CA-839

To search for information about known issues, visit the knowledge base at support.magnetforensics.com.