UserAssist Forensic Artifacts: What they are and how to use them
UserAssist is a feature in Windows that tracks the usage of executable files and applications launched by the user.
UserAssist is a feature in Windows that tracks the usage of executable files and applications launched by the user.
As the volume and variety of electronically stored information continues to grow, legal and investigative teams encounter increasing complexity in their search for evidence. Successfully managing a modern investigation requires a coordinated approach that integrates legal expertise, advanced digital forensics, and efficient eDiscovery workflows.
This is the second entry in a four-part series showing you how Magnet One helps your digital forensics lab save time and effort in your investigations. Be sure to check out the other entries in this series to learn more about how Magnet One helps you save time in your investigations by streamlining your forensics … Continued
This is the fourth blog post in a series of five about recovering Business Applications & OS Artifacts for your digital forensics investigations. What are prefetch files? Prefetch files are great artifacts for forensic investigators trying to analyze applications that have been run on a system. Windows creates a prefetch file when an application is … Continued
This is the third blog post in a series of five about recovering Business Applications & OS Artifacts for your digital forensics investigations. What are LNK files? LNK files are a relatively simple but valuable artifact for the forensics investigator. Shortcut files link to an application or file commonly found on a user’s desktop or … Continued
This is the first entry in a four-part series showing you how Magnet One helps your digital forensics lab save time and effort in your investigations. Be sure to check out the upcoming blogs in this series to learn more about how Magnet One helps you save time in your investigations by streamlining your forensics … Continued
To say the mobile landscape evolves quickly is an understatement. With frequently updated operating systems and new security features to contend with, the window of opportunity for digital examiners to collect mobile data is constantly shrinking. Longstanding device seizure processes and best practices simply aren’t enough to protect mobile extractions anymore. With the need to … Continued
It’s this year’s final release of Axiom Cyber, and we’ve added several improvements to help you complete your investigations as efficiently as possible. Magnet Axiom Cyber 8.8 includes: We’ve also updated and added to our artifact support (full details at the end of this blog). Upgrade to Axiom Cyber 8.8 in the Axiom Cyber interface … Continued
Our final Magnet Axiom release of 2024 is out now, adding several improvements to the features and capabilities of Axiom to help you advance your investigations as efficiently as possible. This release of Axiom adds: In addition to new features and functionality, this release also includes new and updated artifact support to help keep your … Continued
With the number of mobile devices exceeding the global population, evidence from smartphones plays an essential role in criminal investigations. But as mobile devices continue to grow in storage capacity, the time needed to extract and process this critical data becomes increasingly challenging. With our latest integration, we have added the ability to send mobile … Continued