Thanks to new advances we’ve brought into Magnet AXIOM 1.1, and our new integration with Passware, AXIOM now allow you to decrypt drives with a known password that have been encrypted with BitLocker & BitLocker To Go, TrueCrypt, and PGP Desktop WDE versions 9.x-10.x. A Smoother Experience While Never Leaving AXIOM We have worked hard … Continued
Magnet Forensics has joined forces with Passware to provide full disk decryption (FDD) to our customers. Coming soon – Forensics examiners will be able to analyze content from drives running encryption software like BitLocker, TrueCrypt, and PGP in Magnet AXIOM. AXIOM is growing like a weed this year and the addition of full disk decryption … Continued
In our new white paper on Android 6.0 (Marshmallow) forensics, we talk a little bit about Gatekeeper password storage, a new-as-of-Lollipop feature designed to introduce a new level of obfuscation to PIN and pattern locks—both in file name and location, and in hash settings. In previous Android versions starting with 2.2, devices’ 4- to 16-digit … Continued
The term “artifact” is widely used within the computer forensics industry, though there is no official definition of this term. According to ForensicsWiki.org, digital investigators will tell you the meaning of the word is taken from archaeology, which defines an “artifact” as, “Something made or given shape by man; such as a tool or a work … Continued
APPLICATION NAME: Google ChromeCATEGORY: Web RelatedRELATED ARTIFACTS: Chrome Web History, Chrome Web Visits, Chrome Sync Data, Chrome Sync Accounts, Chrome Session/Tabs Carved, Chrome Last Tabs, Chrome Current Tabs, Chrome Last Session, Chrome Current Session, Chrome Top Sites, Chrome Logins, Chrome Searches, Chrome Keyword Search Terms, Chrome History Index, Chrome FavIcons, Chrome Downloads, Chrome Cookies, Chrome … Continued
In part one of our Portable Case series, our Director of Forensics, Jessica Hyde, took a look at the features and benefits of Portable Case. She highlighted the power of real-time collaboration with multiple stakeholders and having all the feedback collected in one place. Read part one here. How to: Magnet AXIOM Portable Case for … Continued
Keywords are an essential part of many forensic examinations. While running keyword lists shouldn’t be the extent of an investigation, the right keyword list can help examiners quickly get to the relevant evidence for their case. Magnet AXIOM allows examiners to run several different keyword searches either before or after processing your case. Let’s take … Continued
One of the most obvious benefits of Magnet AXIOM is the access to the entire file system, as well as the hundreds of artifact types that the Magnet parsing and carving engine finds. To accommodate the larger data set and expanded access, we’ve improved the hashing functionality as well. If you are more familiar with … Continued
Magnet AXIOM version 1.0.7 is now available. This new version includes support for Pebble Watch for iOS and Android. Examiners can now access the Pebble Watch artifacts to recover information held by those apps, including notification time stamps, calendar events, weather, location and health data. AXIOM 1.0.7 also adds the ability to extract artifacts from … Continued
Processing Times Reduced Dramatically in AXIOM 1.0.6 By Jad Saliba, Founder and CTO of Magnet Forensics Last week, we released Magnet AXIOM version 1.0.6. This update included a number of features and fixes, but one of the main goals was to address issues we, and our customers, had seen in processing times. And we did it! … Continued
