Mobile devices are playing an increasingly important role in insider threat investigations. As mobile access becomes more challenging, DFIR teams need effective ways to collect relevant evidence while protecting employee privacy.
Modern eDiscovery starts with the right data. Digital forensics helps teams collect and assess relevant evidence from mobile, cloud, and endpoint sources while maintaining integrity, reducing over-collection, and strengthening case strategies.
The effectiveness of AI in digital forensics hinges on one critical factor: how you prompt it.
Join Brandon Epstein for a practical look at how to take control of AI so it works effectively for you. This session will break down what makes a good AI prompt, including effective structures and how they can produce meaningful and reliable outputs. Additionally, he’ll cover common prompting pitfalls that you’ll want to avoid, which can often introduce bias, errors, or hallucinations.
Whether you’re just starting to explore AI or looking to refine your current workflows, this webinar will give you the tools to get the most out of AI as a dependable investigative ally.
Bates numbering helps legal and investigative teams organize, track, and cite evidence with confidence. See how Magnet Axiom Cyber supports defensible eDiscovery workflows with customizable Bates numbering during PDF exports.
Time-based metadata reveals frame-specific data such as GPS coordinates, speed, and event timelines, helping investigators analyze evidence with greater accuracy. Discover how Magnet Verify unlocks this hidden layer of forensic data.
Modern attackers increasingly rely on tools already present on the systems they compromise — PowerShell, WMI, scheduled tasks, RDP, and other built-in utilities that blend into normal administrative activity. This episode works through the LOLBin problem in three layers: the detection foundation (baselining tool usage and building appropriately scoped alerts), filtering legitimate from malicious usage by parent process, argument structure, and behavioral context, and the forensic reconstruction — the host artifacts that survive when SIEM telemetry is gone. Covers PowerShell ScriptBlock logs, WMI event subscriptions, scheduled task XML definitions, Shimcache, Amcache, prefetch, and RDP/SMB lateral movement artifacts, with Magnet Axiom Cyber for endpoint artifact analysis and Magnet Nexus for enterprise-wide scoping.
Android Auto, like Apple’s CarPlay, is designed to seamlessly connect smartphones to vehicles. But what traces does it leave behind?
In this episode of Mobile Unpacked, we’ll examine the artifacts generated by Android Auto and explore the evidence they can reveal — from locations and messages to timestamps and user activity. We’ll also look at where investigators can uncover additional context to help reconstruct events and develop a more complete picture of a user’s actions. Join us to learn how vehicle-connected mobile activity can provide valuable investigative insights.
How many different ways are there to get Android data? What’s the difference between agent-based extractions and ADB acquisitions?
Deepfakes are everywhere in today’s headlines, fueling fear and driving a surge of “AI vs. AI” detection tools. But here’s the truth: recent research shows these solutions often fall short of their promises and create challenges for admissibility in investigations and legal proceedings. Join our resident AI expert, Brandon Epstein, as he kicks off Season 2 of our popular AI Unpacked series. He’ll lead a candid discussion that slices through the noise and explores:
At Magnet, we are using Artificial Intelligence to transform the way digital investigators uncover, analyze, and interpret evidence – unlocking insights once thought impossible.
