Since launching our Samsung Android custom recovery flashing mobile acquisition method in June, we’ve spent the summer building up a cache of resources to help you get the most out of this new capability. Start with our overview blog post on how to find and load recovery images within AXIOM Process. From there, check out … Continued
Now available! Learn about the live and dead exploit methods available to acquire evidence from Android devices—including newer recovery methods. Download our white paper to learn more! In last week’s blog post, we offered a short history into the many mobile forensic methods that exist to help investigators retrieve evidence from Android devices. We talked … Continued
Multiple forensic methods may work for any one device, but what’s “recommended” may not always net more data; in fact, incorrectly applied methods could modify or wipe the evidence altogether. Do you know which is which? Each advancement in mobile forensics methods has occurred in response to a need to cope with rising evidence volumes … Continued
With Magnet AXIOM 1.1.3, we’ve not only made it easier for users to acquire and process images from mobile devices, but we’ve also brought improvements to our reporting capabilities — making the experience an even smoother one for stakeholders to use the evidence presented to them in their investigations. Find out more about what’s included … Continued
In previous versions of Magnet AXIOM, you were required to unlock and enable USB debugging for Android device acquisitions or use Magnet ACQUIRE to load your own custom recovery images. Now, we’ve built this right into AXIOM, adding over 680 recovery profiles for Samsung devices with plans to add more in the future. Flashing a … Continued
Magnet AXIOM 1.1.2 is now available to download for customers — bringing with it the aforementioned integration with Griffeye and Project VIC, as well as significant developments in mobile acquisition, Portable Case, and BitLocker decryption. Get the latest version of Magnet AXIOM in the Customer Portal now. Enhanced Integration with Griffeye and Project VIC As … Continued
Thanks to new advances we’ve brought into Magnet AXIOM 1.1, and our new integration with Passware, AXIOM now allow you to decrypt drives with a known password that have been encrypted with BitLocker & BitLocker To Go, TrueCrypt, and PGP Desktop WDE versions 9.x-10.x. A Smoother Experience While Never Leaving AXIOM We have worked hard … Continued
In our new white paper on Android 6.0 (Marshmallow) forensics, we talk a little bit about Gatekeeper password storage, a new-as-of-Lollipop feature designed to introduce a new level of obfuscation to PIN and pattern locks—both in file name and location, and in hash settings. In previous Android versions starting with 2.2, devices’ 4- to 16-digit … Continued
Mobile device encryption has been a headache for investigators ever since Apple introduced it with the iPhone 3GS and iOS 3.0. Since that time, encryption headaches have only accelerated, with Apple tying it to hardware (the A5 and later processing chips) and adding layers of data to its encryption. With Android in the game now … Continued
A new Magnet Forensics white paper is coming soon, and while it focuses on the technical aspects of Android Marshmallow Forensics, running underneath those details is another theme: the only way to stay current on mobile device technology changes is to know how to get out in front of them. Yet few, if any, forensic … Continued
Notifications
