Author: Phil Froklage

Comparing logical extraction vs file system extraction

By

Law Enforcement agencies perform logical acquisitions of unlocked iOS devices when they do not have access to Magnet GRAYKEY. The logical acquisition has been an industry-leading iOS acquisition method used by investigators and forensic examiners because of its simplicity and level of support. However, device security is one of the biggest roadblocks to completing logical acquisitions. For a logical acquisition to take place, device access needs to be granted using a passcode, and a trusted connection is required in most instances.  

AirTag Trackers: Public Safety and Digital Evidence

By

AirTag, Apple’s foray into the Bluetooth tracker market, has major implications for public safety and digital evidence. Apple’s worldwide device network means that AirTag will make it extremely easy to track objects, but these tools can be used by bad actors as well. A criminal can now easily slip an AirTag into an unsuspecting victim’s bag, car, or other personal item to track their every move.

Take a Stand Against CSAM

By

Magnet Forensics is a proud partner and supporter of the Child Rescue Coalition (CRC). The CRC is “a nonprofit organization that rescues children from sexual abuse by building technology for law enforcement, free of charge, to track, arrest, and prosecute child predators.”

How EDR, XDR, and SIEMs complement DFIR

By

Chances are if you have EDR (Endpoint Detection and Response) tools, your cybersecurity posture is mature enough that you also have DFIR (Digital Forensics and Incident Response) tooling as well. But you may be wondering: how they overlap, if at all. Do EDR tools and DFIR tools do the same thing, or do they complement each other?