IME Suggestions - Google Japanese Input | Computer: Added parsing support for Google Japanese language input method.
Samsung Rubin Application Usage | Android: Added parsing for Samsung Rubin Application Usage.
Samsung Rubin Charging Connections | Android: Added support for information about charging connections such as the connection time and place.

Outlook Emails | Computer, macOS, Android, iOS, Cloud, Windows Phone: Updated to include recipient email address.
Cloud IMAP/POP Emails, Cloud Outlook Mail | Cloud: Updated to include recipient email address.
Samsung Customization Service Charging Connections | Android: Updated to include location Name, Latitude, Longitude, and Address for each log entry.
Signal Messages | iOS: Updated parsing for encrypted message media/attachments for version 7.26.1.
Telegram Messages | Android: Update parsing to include Sender and Recipient.
TextNow Chat, TextNow Profile | iOS: Updated to support version 24.25.1.
Updated processing of Instagram and Facebook to support newest Warrant Return format.
LINE Chats | Android: Updated to support schema for version 14.x.
Samsung Places | Android: Updated to include Place Key ID.
Facebook Messenger Messages | iOS: Updated to include parsing support for attachments.
Installed Applications | Windows: Updated to produce more accurate values for CreatedDate and KeyLastUpdatedUTC.

Axiom Process can now acquire folders and their contents from Google Chat when they are included as modern attachments.
Archived chats are now acquired for Cloud Facebook Messenger Messages.
Magnet Axiom now supports acquiring Facebook Private Timeline comment replies.
Updated processing of Instagram and Facebook to support newest format.

Magnet.AI is now compatible with the latest Nvidia drivers (and CUDA versions).

As part of a limited early release, you can right click on a video to analyze for generated content using Medex Forensics.
New AI generated content classifier available with Magnet Copilot Offline (limited early access).
With the release of Magnet Axiom and Magnet Axiom Cyber 8.6, Magnet Copilot Offline is available for a limited early access period, as a separate installer. Magnet Copilot Offline uses a local Magnet.AI service to interpret, search, and respond to questions providing exact and potential relevant results for supported web search and chat thread artifacts.

Improvements to hashsets to prevent duplicate entries.
You can now use Comae for processing .raw memory files.
You can now leverage SIGMA rules to identity TTPs to search Linux evidence sources (Redhat and Ubuntu) using the MITRE ATT&CK® framework to identify possible threats. Cyber

Email artifacts shared with Magnet Review will now include the similar HTML header information as its appears in Axiom Examine.
The Artifacts explorer now includes a Related media artifacts category. Automatically filter the results to display artifacts that share the same hash value as the current selected media artifact.
When filtering results, you will now have the option to save the filter to a collection for resuse.
When selecting "Add to Case" for Magnet Review, Axiom Examine will now indicate if the provided case number will result in adding to an existing Magnet Review case or creating a new Magnet Review case.

Security - CVE-2024-0056: Addressed a transitive dependency where there was a machine-in-the-middle (MITM) TLS vulnerability between a client and a server. The path was never accessible in Magnet Axiom, however this addresses any future risk and use as well. -ENGN-11367
Security - CVE-2024-5535 and CVE-2023-5363 - Upgrading libssl library used to encrypt local communication over physical USB devices for iOS extractions. These are both moderate and low severity as per OpenSSL (https://openssl-library.org/news/vulnerabilities-3.1/). ENG-12386
Previously, some temporary files would not be removed after processing completed. Note: some temporary files may still be present after processing. -ENGN-12398
Previous, Axiom Examine may have crashed when attempting to save a report. -EXM-4130
Previously, an offline instance of Axiom Examine may have crashed when attempting to upload to on-prem instance of Magnet Review. -EXM-4102
Previously, Axiom Examine may have failed to generate a report if an embedded picture within the report was hosted in a cloud resource. -EXM-4068
Previously, Axiom Examine may not have produced chat threads after processing a Facebook Warrant return. -EXM-4169
Previously, Android SMS / MMS hits would only recover the first attachment of a hit with multiple attachments. You can now recover multiple attachments. -MARS-2366
Previously, Android WhatsApp Calls from encrypted backup locations may have produced duplicate hits. -MARS-2552
Previously, Magnet Axiom may have missed some emails when parsing EML files. -CARS-1067
Previously, the User Accounts artifact for Windows may have indicated the Password Required value as True, contrary to the Hex value. -CARS-609
Previously, WhatsApp Messages - iOS, did not indicate a call in Messages chat thread and Messages. -MARS-2505
Previously, Meta Warrant Returns would not fully process html files. -CLA-97
Previously, Axiom Process may have failed to successfully parse Gmail due to a precondition check failure. -CA-1777
Previously, Facebook Marketplace messages were not acquired with Facebook Messenger Messages. -CA-2261
Previously, processing of Slack exports may have taken longer than expected. -CA-2438
Previously, The option to Add members when processing a Slack export may have become nonresponsive. -CA-2469
Previously, Axiom Process may become nonresponsive after selecting Slack users from a Slack export. -CA-2485
Previously, files would not be acquired from Box.com if the Edit selection was modified. -CA-2464
Previously, parsing for Installed Applications - macOS, may have thrown an exception and resulted in the artifact not being fully processed. -CARS-1064
Previously, Magnet Axiom may have missed some emails when parsing EML files. -CARS-1067
Updated to fix chat threading issue for WeChat Messages, iOS. -MARS-2531
Updated to address issues with parsing null values for WhatsApp Calls, iOS. -MARS-2531
Previously, Chrome Login decryption may not have been successful. -CARS-1082

To search for information about known issues, visit the knowledge base at support.magnetforensics.com.

Featured artifacts

Magnet Copilot Offine

View Related Media Artifacts

TTPs with MITRE ATT&CK® (Linux)