In digital forensics, Windows operating systems leave behind a wealth of forensic artifacts that can be invaluable in investigations. Among the key artifacts are ShimCache (Application Compatibility Cache) and AmCache (Application Activity Cache). These artifacts can provide valuable insights into program execution and file system interaction, often essential in piecing together an event timeline or … Continued
PowerShell is a powerful tool within Windows systems, widely used for administrative tasks, automation, and scripting. Unfortunately, due to its powerful scripting capabilities and default presence on Windows machines, it has also become a popular tool for malicious actors. PowerShell can be used in advanced attacks, including fileless malware, lateral movement within a network, and … Continued
Time is always critical when dealing with criminal investigations, but did you know that some iOS forensics evidence will be lost entirely if it isn’t extracted within a certain window of opportunity? To help avoid any lost data during mobile forensic data extraction, we have outlined the best iOS evidence sources to capture before expiration, … Continued
Remote Desktop Protocol (RDP) is a powerful tool for remote administration, but it can also be a gateway for attackers seeking unauthorized access. For digital forensics professionals, RDP artifacts are critical in tracing an intruder’s steps. In this blog, we will explore what RDP digital artifacts entail, where they are located, how they can be … Continued
Data exfiltration—the unauthorized transfer of data from a system—can result in severe damage to organizations, making it critical for forensic investigators to identify key digital artifacts that reveal how, when, and where the breach occurred. Tools such as Magnet Axiom Cyber, Magnet Axiom, and Magnet Nexus are essential in uncovering these critical pieces of evidence. These … Continued
About a year ago, we announced our partnership with the National Center for Missing and Exploited Children (NCMEC)—the largest and most influential child protection organization in the U.S. Over the past year, we have collaborated to build a new information-sharing solution to support ICAC investigators across the U.S. Today, we’re excited to launch the NCMEC … Continued
Join us for the DFIR event of the year. This is your chance to get hands-on training and hear about the newest innovations from Magnet Forensics
Access is the cornerstone of digital forensics. Magnet Graykey accesses more data than any other extraction technology to help you solve more cases. Apple support Graykey is widely recognized as the industry leader for accessing Apple iOS devices, providing innovative and timely solutions to address new hardware, security features and iOS updates. Agencies across the … Continued
Discover how remote endpoint forensics tools like Magnet Nexus and Axiom Cyber helped detect and investigate an insider threat involving IP theft.
With ever-growing volumes of mobile device data involved in today’s crimes, we know that mobile investigations are by far the top priority in most agencies today. With our first step in realizing the vast potential of Magnet One, we’re focusing on enhancing your mobile investigations with the combination of Magnet Graykey/Verakey and Magnet Axiom/Axiom Cyber, … Continued
