Time-based metadata reveals frame-specific data such as GPS coordinates, speed, and event timelines, helping investigators analyze evidence with greater accuracy. Discover how Magnet Verify unlocks this hidden layer of forensic data.
Modern attackers increasingly rely on tools already present on the systems they compromise — PowerShell, WMI, scheduled tasks, RDP, and other built-in utilities that blend into normal administrative activity. This episode works through the LOLBin problem in three layers: the detection foundation (baselining tool usage and building appropriately scoped alerts), filtering legitimate from malicious usage by parent process, argument structure, and behavioral context, and the forensic reconstruction — the host artifacts that survive when SIEM telemetry is gone. Covers PowerShell ScriptBlock logs, WMI event subscriptions, scheduled task XML definitions, Shimcache, Amcache, prefetch, and RDP/SMB lateral movement artifacts, with Magnet Axiom Cyber for endpoint artifact analysis and Magnet Nexus for enterprise-wide scoping.
Android Auto, like Apple’s CarPlay, is designed to seamlessly connect smartphones to vehicles. But what traces does it leave behind?
In this episode of Mobile Unpacked, we’ll examine the artifacts generated by Android Auto and explore the evidence they can reveal — from locations and messages to timestamps and user activity. We’ll also look at where investigators can uncover additional context to help reconstruct events and develop a more complete picture of a user’s actions. Join us to learn how vehicle-connected mobile activity can provide valuable investigative insights.
How many different ways are there to get Android data? What’s the difference between agent-based extractions and ADB acquisitions?
Deepfakes are everywhere in today’s headlines, fueling fear and driving a surge of “AI vs. AI” detection tools. But here’s the truth: recent research shows these solutions often fall short of their promises and create challenges for admissibility in investigations and legal proceedings. Join our resident AI expert, Brandon Epstein, as he kicks off Season 2 of our popular AI Unpacked series. He’ll lead a candid discussion that slices through the noise and explores:
At Magnet, we are using Artificial Intelligence to transform the way digital investigators uncover, analyze, and interpret evidence – unlocking insights once thought impossible.
Remote digital investigations are transforming how teams collect and analyze evidence, replacing slow on-site methods with faster, more precise workflows.
As AI has made fake images and videos much more realistic, it’s getting harder for investigators to tell what’s real, especially when the answer needs to stand up in court. Answers to media authentication questions can generate a lot of complex data for analysis. The team at Magnet Forensics have simplified the process for digital … Continued
Most incident response teams are built to detect and contain threats, but not always equipped to fully understand the extent of the threat. This eBook explores the growing investigative gap between alert and answer, where key questions remain: how the attacker got in, what they did, and whether it can be proven. Learn why traditional … Continued
A cloud investigation tool helps enterprises collect, analyze, and connect cloud and endpoint evidence, giving teams the context they need for faster, more defensible investigations.
