New Features

Magnet Axiom Cyber 8.1: Magnet Exhibit Builder, Gmail modern attachments, and more!

We’re excited to announce the release of Magnet Axiom Cyber 8.1—with added new capabilities and enhancements to features announced in Axiom Cyber 8.0.

In this release, we’re providing:

  • The inclusion of Magnet Exhibit Builder in Axiom Cyber
  • The ability to acquire Gmail modern attachments
  • MFT parsing updates
  • Magnet Copilot improvements

We’ve also updated and added to our artifact support (additional details are at the end of this blog.)

Upgrade to Axiom Cyber 8.1 within the AXIOM Cyber interface or through the Customer Portal

Haven’t tried Axiom Cyber yet? Request your free trial here.

Magnet Exhibit Builder is now included with Axiom Cyber

With the depth, variety, and volume of evidence in modern cases, developing engaging reports that effectively tell the story of the case for stakeholders, including those that aren’t technical, is a persistent challenge.

Magnet Exhibit Builder elevates your digital forensic reports, combining forensic data from Axiom Cyber case files and all other external data sources using versatile word processing tools to build comprehensive reports for a range of audiences quickly.

Examiners love how easy it is to create a visually engaging report using drag-and-drop functionality and creating custom report templates, cutting down on the time it takes to build reports and maintain consistency.

If you’re an Axiom Cyber customer, you can log in to the Support Portal and download Exhibit Builder now to give it a try! Use your Axiom Cyber license and make sure to install Exhibit Builder on the same system as Axiom Cyber.

Check out this interactive tour of Exhibit Builder to experience it for yourself:

To learn more about Exhibit Builder, read the blog post: “Elevate your digital forensics reports with Magnet Exhibit Builder.”

Acquire Gmail modern attachments

Email still reigns supreme as the primary method of communication in the workplace, “with over half (52.5%) of workers saying they use email at least once a week.” However, as document sizes have grown, sharing large files by email has become a challenge. So as not to slow down systems with unwieldy large files, email providers and IT teams have implemented policies to limit attachment sizes.

Google limits attachments to 25MB, with anything larger being shared as a link to the file in Google Drive. This creates challenges for eDiscovery & investigations teams who need to collect and preserve these documents as part of their case.

With Axiom Cyber 8.1, files shared as a Google Drive link when they exceed the 25 MB limit can now be acquired. Additionally, Axiom Cyber can acquire links to any Google Drive files that the authenticated user has access to, regardless of the size.

Remotely acquire the MFT using Axiom Cyber

MFT parsing provides forensic examiners with insights that can be used to quickly triage an incident by reviewing the file system content and any changes.

We introduced MFT parsing in Axiom Cyber 8.0, and in this latest release we’ve streamlined the workflow further by allowing you to acquire a single or multiple MFT files directly from an endpoint.

To learn more about MFT parsing in Axiom Cyber, check out this blog post and explore the interactive walkthrough below:


Improvements to Magnet Copilot’s AI capabilities

The recent surge of synthetic media or deepfakes presents significant challenges in digital investigations, and the volume of digital evidence is ever-increasing. To help you identify deepfakes and efficiently surface relevant evidence in your cases, we introduced Magnet Copilot in Axiom Cyber 8.0.

With Axiom Cyber 8.1, we’ve updated Copilot with the following enhancements:

  • Improvements in image processing, supporting a wider range of image formats for both image QA and synthetic media. Support includes .gif, .heic, and .tiff images.
  • An image QA function that now provides a summary report of the images matching the user’s query.

To learn more about Magnet Copilot, visit our blog and video or explore the demo below:

New and updated artifacts  

We’re continually adding and updating artifacts based on the applications you’re coming across in your investigations.

This release includes new and updated artifacts, including:


  • Apple Keychain – Elcomsoft iOS Forensic Toolkit (EIFT) (iOS)
  • Discord Warrant returns (cloud)
  • Eufy Cached Media (Android, iOS)
  • Eufy Device Information (iOS)
  • Google Home Android, (iOS)
    • Cached Media
    • Device Information
  • Google Modern attachments (cloud)
  • iMessage for iOS 17  (cloud)
  • Kasa Cached Media (Android, iOS)
  • Kasa Device Information (iOS)
  • Kasa User Information (iOS)
  • Notifications Cached Media (iOS)
  • TeleGuard (Android)
    • Accounts Information
    • Channels
    • Contacts
    • Groups
    • Messages
    • Posts


  • All Edge Chromium (Android, iOS, Windows, MacOS)
  • Art Health (Android, iOS)
  • Chrome Cookies (Mac, iOS, Windows)
  • Google Drive Desktop (Windows)
  • Facebook Warrant Return (cloud)
  • iMessage/SMS/MMS (iOS)
  • Instagram
    • Direct Messages (iOS)
    • Posts (Android)
  • Pictures All Platforms
  • Signal Messages (Android, iOS)
  • Tik Tok Messages (iOS)
  • Wallpaper (iOS)
  • WhatsApp Messages (Android, iOS)

Get Magnet AXIOM Cyber 8.1 Today!   

Download Axiom Cyber 8.1 over at the Customer Portal or upgrade within the application.  

Haven’t tried Axiom Cyber yet? Request your free trial here.

Subscribe today to hear directly from Magnet Forensics on the latest product updates, industry trends, and company news.

Start modernizing your digital investigations today.