Google accounts with Workspace administrator privileges often have access to more data than typical user accounts. With an Administrator account, not only can you access user account Gmail and Drive contents but also audit lots providing more in-depth analysis into your Workspace environment. When utilizing Workspace administrator privileges, you can choose to access data from … Continued
We’re proud to announce the availability of Magnet OUTRIDER —a new way to help you quickly find CSAM to prioritize or flag devices for additional examination. In addition to previewing material, OUTRIDER can help you by empowering Investigators on your team by quickly identifying apps on a suspect’s device and giving your team real-time intel … Continued
Magnet AXIOM 3.11 is now available to download within AXIOM or over at the Customer Portal. AXIOM 3.11 brings you new Device Identifiers — with device information like IP addresses and camera serial numbers — as well as support for .dar files from Cellebrite Advanced services and a number of new and updated artifacts, like … Continued
One of the most popular secure messaging apps currently on the market, Signal, stands apart from its competitors with a unique take on development. It’s open source, the subject of numerous independent audits, and ad-free. Signal is widely regarded as a role model showing how secure messaging ought to look. Today, Signal is wholly owned … Continued
Beginning in Magnet AXIOM 3.11, the dar file format (or Disk ARchive) is now supported for image processing. In Cellebrite-generated .dar files, Accessed, Modified, and Changed are stored inside the .dar file. However, the Created timestamp is stored in external .plists, typically found alongside your extraction in the “MetaData” folder. For a further explanation of … Continued
The Identifiers artifact has been a staple for Magnet AXIOM users for quite some time. The premise of this artifact is relatively simple, yet quite helpful in most investigations: Identifiers will search through all of the recovered artifacts for anything that might uniquely identify a person or user. This could be a real name, username, … Continued
The DFIR community is a tightly knit one and, in the face of this worldwide pandemic, we want to make sure everyone stays in this together. While physical distancing means that it was necessary to cancel our in-person Magnet User Summits around the world, we were determined to find a way to bring together our … Continued
Since 2009, Lee Whitfield (@lee_whitfield) has held the annual Forensic 4:cast Awards in which the community nominates and votes for outstanding work done in digital forensics from around the industry. It seems every year both individuals and businesses raise the bar for outstanding work. Submit nominations for the 2020 Forensic 4:cast awards here. Nominations end … Continued
With Magnet AXIOM Cyber, investigators can now acquire and analyze data from Microsoft Teams without the need of additional tools or use of Compliance Center. In this blog we’ll discuss the steps necessary for investigators to complete to acquire MS Teams data directly into AXIOM Cyber. Along with the ability to collect from cloud sources … Continued
Recently Joshua Hickman (@josh_hickman1) author of the Binary Hick released the latest in his series of WELL DOCUMENTED images for the public, and Android 10 image. A week later, he shared an amazing post on Android’s Digital Wellbeing timeline. Every day forensic researchers, like Josh, are finding, documenting and sharing the new artifacts they find — which … Continued
