Digital Forensics: Artifact Profile – Windows Recycle Bin

Windows Recycle Bin in Digital Forensics The Windows Recycle Bin, a seemingly simple feature, has undergone significant changes across different versions of the Windows operating system. This artifact is not just a virtual trash can but a critical element in digital forensic investigations. Understanding its evolution and functionality can provide valuable insights into user activity … Continued

How Magnet Axiom can enhance a vehicle accident investigation

While digital evidence is commonly linked to crimes like child exploitation, violent offenses, and cybercrimes, its significance extends to almost every crime, including understanding the complexities of vehicle accidents. A traditional vehicle accident investigation focuses on reconstructing the physical scene and Magnet Axiom adds a crucial new dimension: the digital traffic crash scene. Consider the … Continued

What’s new in Magnet Axiom 8.4

Magnet Axiom 8.4 is now available, delivering feature and functionality improvements that will help you work as efficiently as possible, including: You can upgrade within Axiom or over at the Customer Portal. If you’re looking to try Axiom, you can request a free trial here. Artifact reference in Portable Case There have been a number … Continued

That one artifact: How cloud forensics reveal evidence when devices don’t

In this series, Chad Gish, CID/SISU Detective, Metropolitan Nashville Police Department shares some noteworthy cases in his extensive career where tools like Magnet Axiom were able to help close a difficult case.  The importance of acquiring cloud and social media data in criminal investigations cannot be overstated. Sometimes there can be crucial information found that … Continued

Not all geolocation data is created equal

Geolocation data has become an indispensable tool in criminal investigations, offering unparalleled insights into the movements and whereabouts of mobile devices. This technological advancement provides law enforcement with the ability to reconstruct crime scenes, establish timelines, and verify alibis with a level of precision that was previously unattainable. The forensic examination of mobile digital devices … Continued

That one artifact: How Bluetooth artifacts cracked a case   

In this series, Chad Gish, CID/SISU Detective, Metropolitan Nashville Police Department will delve into some noteworthy cases in his 26-year career, focusing on investigations that were either completely solved or significantly aided by a critical piece of evidence—what he calls “that one artifact.” Digital evidence possesses the remarkable ability to accelerate investigations and frequently establishes … Continued

Software kernels: Unraveling digital forensics intricacies

In this article we will cover the basics of what a software kernel is, the application of software kernels in the context of digital forensic examinations, and we’ll shed some light on how kernels contribute to the acquisition and analysis of data during a forensic investigation.