Magnet AXIOM 6.7 is now available! In this release, we’re introducing the automatic loading of iOS keychains to help ensure additional data sources are brought to the surface in your iOS extractions. This release also includes support for known and non-relevant hash sets in Hash Sets Manager Beta to help streamline the volume of data that needs to be reviewed.
SRUM, or System Resource Utilization Monitor, is a feature of modern Windows systems (Win8+), intended to track the application usage, network utilization and system energy state. SRUM, as with most operating system features, wasn’t designed for the forensicator, but that doesn’t mean we can’t use it to support our investigations.
We’re proud to once again be able to offer promising officers an opportunity to enter the field of, and advance in, digital forensics through the Magnet Forensics Scholarship Program. Applications are open until December 1, 2022.
Magnet AXIOM 6.6 is now available, and in this release, we’re introducing parsing for CLBX keychain, so you can uncover more from Cellebrite UFED and Premium iOS extractions. Plus, we are continuing to improve our analytical tools as you can now toggle between map points and clusters in World Map.
Cellebrite images are quite popular, as the tool supports many different devices and extraction types. Because of this, you may get several different image types depending on the device and the type of extraction done. Often, I will get questions on how to load Cellebrite images into Magnet AXIOM and while it’s quite easy, it’s not always straightforward.
With Apple’s announcement of iOS 16’s official launch date, as well as providing their latest “gold master” build, we wanted to take a dive into iOS 16 and see what all was going to be new from an analysis and acquisition perspective.
MRU artifacts, or Most Recently Used are a variety of artifacts tracked by modern Windows operating systems that provide crucial details regarding the user’s interaction with files, folders, and programs that may have been executed using the Windows Run utility. This is fortunate for examiners, because profiling user activity is something digital forensic examiners are often tasked with to corroborate what we believe happened on a computer. It is a method for supporting our theory of the user’s behavior on a system.
Magnet AXIOM 6.5 is now available with new enhancements for Timeline and Media Explorer so you can uncover and manage your case evidence with ease.
When you need to quickly narrow the scope of your investigation to analyze the data related to a crime or activity that occurred at a specific time, the Timeline explorer in Magnet AXIOM & Magnet AXIOM Cyber offers you an intuitive interface that surfaces time relevant evidence in a visual manner.
In this series, we walk through how to ingest images from a variety of third party sources into Magnet AXIOM.
