UserAssist Forensic Artifacts: What they are and how to use them
UserAssist is a feature in Windows that tracks the usage of executable files and applications launched by the user.
UserAssist is a feature in Windows that tracks the usage of executable files and applications launched by the user.
Announcing Magnet Mobile Certified Examiner (MMCE) certification, an accreditation that showcases an expert-level competence in mobile investigations.
To say the mobile landscape evolves quickly is an understatement. With frequently updated operating systems and new security features to contend with, the window of opportunity for digital examiners to collect mobile data is constantly shrinking. Longstanding device seizure processes and best practices simply aren’t enough to protect mobile extractions anymore. With the need to … Continued
Cybercrime, regulatory pressures, and corporate security concerns all drive the need for more effective remote data collection tools. Your organization needs to access, analyze, and secure digital evidence from a wide range of sources—including cloud services and mobile devices—to uncover criminal activity, counter complex cyberattacks, ensure regulation compliance, and accelerate incident response to contain and … Continued
Beginning with iOS 18, Apple has added an inactivity reboot timer into the operating system that is tied only to the device’s lock state. This means that when the device has been locked for a period of three days (72 hours), the device reboots. Sounds simple, right? Well, it’s not quite so simple for the … Continued
In today’s digital landscape, cyber threats are ever evolving, making cybersecurity measures a non-negotiable for businesses of all sizes. However, even the most comprehensive defenses can be breached, either through unpatched exploits, or by an insider who inadvertently causes one.
In today’s digital age, the use of mobile devices has become pervasive across different domains. With the increase in usage, the role of geolocation in mobile device investigations has become more crucial than ever.
With Magnet VERAKEY and Magnet ARTIFACT IQ, investigators can acquire, preserve, and analyze the contents of the full file system.
Hybrid work is here to stay. With the increasing prevalence of remote work, mobile device policies are one area businesses must focus on. Businesses face a unique challenge because smartphones have become such critical tools for today’s working professionals.
GrayKey extractions are an amazing tool for digital investigators and examiners, since getting a full file system image is crucial. For years, most forensic examinations of iOS devices were limited to data only available in an iTunes backup and only if you had the user’s passcode—with Android acquisitions not being much easier.