New in Magnet Nexus: Deeper Windows evidence, faster macOS ARM collections

We’re excited to roll out two major enhancements to Magnet Nexus giving you deeper data collection, stronger performance, and more reliable collections across modern macOS environments:

• Physical image collection from Windows endpoints
• A fully native ARM-based agent for macOS endpoints

Together, these improvements help ensure your investigative teams can capture the complete picture of an incident quickly, defensibly, and at scale.

Full physical image collection for Windows

Nexus now enables investigative teams to acquire a bit-for-bit physical image of Windows endpoints, such as unallocated space, deleted artifacts, and remnants (slack space) of prior activity.

This gives you the deepest level of visibility into what actually happened on the device.

Where physical imaging still matters

Physical images are necessary when you need to preserve a complete dataset from an endpoint. When legal, regulatory, or internal investigations are on the line, gaps in collection can create risk:

• Logical collections may miss deleted files, residual fragments, or indicators of deletion or data destruction, which is a major limitation in cases of insider threat or fraud
• User-accessible data alone rarely reflects the complete investigative timeline
• Missing evidence can weaken conclusions or create legal exposure

With a full physical collection, you can:

• Build stronger case findings from a complete dataset, including deleted or previously hidden artifacts
• Reduce the risk of missing critical evidence in high-stakes cases
• Maintain investigative integrity with defensible, full-device preservation

This capability is ideal for investigations involving insider threats, IP theft, fraud, workplace harassment, HR inquiries, compliance-driven reviews, and eDiscovery collections, really any scenario where defensibility and completeness are essential.

Native ARM-based agent for macOS endpoints

As organizations continue transitioning to Apple Silicon devices, investigative teams need reliable, efficient solutions that keep pace.

Nexus now includes a fully native ARM-based macOS agent, purpose built for M-series chips.

Why native macOS ARM support matters

Running agents through Rosetta can introduce potential performance slowdowns and stability and reliability challenges.

Native ARM support removes those dependencies entirely delivering faster, smoother, and more efficient collections across modern Mac endpoints.

With the native ARM-based macOS agent, you benefit from:

• Improved acquisition performance optimized for ARM-based macOS endpoints
• Simpler deployment workflows without Rosetta requirements
• More stable and reliable collections in evolving macOS environments

Nexus continues to offer a macOS agent for Intel-based Macs.

Whether you’re supporting corporate investigations, incident response, or ongoing compliance and legal needs, native macOS performance helps ensure collections complete successfully the first time.

Strengthening digital investigations in modern environments

These updates represent another step forward in the Nexus vision: helping investigative teams confidently navigate the realities of modern digital investigations.

As endpoints evolve and organizations adopt new technologies at a rapid pace, we’re building Nexus to ensure you’re prepared. That means always having reliable, future-ready access to the data that matters most and the ability to collect it quickly, securely, and defensibly.

Learn more about Magnet Nexus

To explore what’s new in Nexus, including these new capabilities, request a trial or speak to one of our experts for a personalized demo.