Hi, everyone. This is Jessica Hyde with Magnet Forensics. I wanted to reach out and share a bit about our newest free tool, MAGNET Custom Artifact Generator, including why I am so excited about how it allows examiners to bring new artifacts into Magnet AXIOM. You may have seen a description of MAGET Custom Artifact … Continued
As examiners and investigators already know, the exponential growth of casework is daunting. As devices get smaller and storage sizes get bigger, forensic labs are seeing the effects of these growing data hauls. The International Data Corporation (IDC) predicts the world’s collective digital data to grow to roughly 175 zettabytes (that’s approximately 175 billion terabytes!) … Continued
For anyone who gets returns from warrants return content from Internet Service Providers (ISPs), searching and analyzing that content can be problematic. The returns are not in a standard format and there are a vast number of artifacts. The formats can change and typically come in .zip files that can include .html, .txt, .json, .csv, … Continued
We wanted to show you some of the content that can be parsed, displayed, and searched in Magnet AXIOM from Warrant Returns. Let’s discuss Apple. Before loading an Apple warrant return, please ensure you use the Free Magnet Apple Warrant Return Assistant found on the Download Our Free Tools page, or using the instructions provided … Continued
AXIOM supports Facebook Warrant Returns that are in a .zip package as part of our Warrant Return support. Unlike Apple returns, Facebook and other providers don’t require you to decrypt the package before loading. Facebook specific content can include the Facebook Audit Log, Friend requests, Friends, Messenger Messages, Photos, Status Updates, and Wallposts. The Facebook Audit … Continued
Did you know AXIOM has built in support for Google Warrant Returns as part of our Cloud Warrant Returns feature. If you have received a return from Google in a .zip format, you can load it into AXIOM and process that evidence alongside other evidence in your case. Google Warrant Returns can be highly valuable … Continued
AXIOM Cloud supports warrant returns from a variety of providers including Instagram. Instagram warrant returns can contain a wealth of data and are available in two formats; namely .pdf and .zip. AXIOM can process warrant returns from Instagram in the .zip format. According to Instagram, the content of the records in both the PDF file … Continued
Snapchat Warrant Returns are one of the supported platforms for analysis in AXIOM. With the Cloud feature, you can load the .zip file you receive from Snapchat into AXIOM and be able to parse a wide array of content alongside your other evidence in the case. This will allow you to timeline Snapchat artifacts alongside … Continued
We’re often asked at Magnet Forensics, are there any available pre-built PII keyword lists or any other PII specific features available for such a case? There are a few great resources in respect to PII keywords, but I unfortunately there doesn’t seem to be one single wide-ranging list of PII keywords for the DFIR community. … Continued
Google accounts with Workspace administrator privileges often have access to more data than typical user accounts. With an Administrator account, not only can you access user account Gmail and Drive contents but also audit lots providing more in-depth analysis into your Workspace environment. When utilizing Workspace administrator privileges, you can choose to access data from … Continued
