When Windows takes a nap and leaves you evidence: Inside hiberfil.sys
Hiberfil.sys is one of those Windows artifacts every examiner should know about. It can contain a near-complete capture of system memory but is also tricky to collect and parse.
Hiberfil.sys is one of those Windows artifacts every examiner should know about. It can contain a near-complete capture of system memory but is also tricky to collect and parse.
Mobile devices can contain a wealth of digital evidence. This includes data that reveals a user’s location, communications, intent, and identity.
Mobile apps are central to how users interact with their devices—and they leave behind a rich trail of forensic evidence. In this episode of Mobile Unpacked, we’ll explore the full lifecycle of an app: how it gets installed, how to trace its origin, monitor its usage, and uncover what remains even after it’s been deleted. Whether you’re investigating user behavior or uncovering hidden data, understanding app artifacts is key to unlocking mobile evidence.
Not all products are available in all regions and may be restricted to specific customer types
Authored by Doug Metz Originally published in the November 2025 issue of Magnet Unlocked. Want to be the first to see new content? Sign up for our monthly newsletter, Magnet Unlocked. In many corporate environments, cybersecurity and DFIR still operate in separate lanes: SOC = Detection & containmentDFIR = Evidence & root cause That separation made … Continued
Magnet User Summit 2026 is getting closer, and we’re excited to share this year’s presentation catalog! We’ve got an incredible collection of presenters lined up ready to deliver sessions that will educate, empower, and inspire everyone joining us in Nashville on April 20-22. That includes insights from both the private sector and law enforcement about AI-driven solutions, navigating the latest mobile forensics challenges, cybersecurity, media authentication, reducing the demands of your investigations in the lab and so much more.
Employee misconduct can pose serious financial, operational, and reputational risks to enterprise organizations. Bullying, sexual harassment, gambling, accessing inappropriate content, and similar misconduct costs U.S. companies up to $300 billion a year according to Work Shield. The 2024 Association of Certified Fraud Examiners’ “Report to the Nations” estimates occupational fraud alone leads to annual losses of more than $3 trillion globally.
Mobile Case Stream combines the power of the Magnet One platform, the unmatched mobile access capabilities of Magnet Graykey, and the seamless case collaboration of Magnet Review to accelerate every step of your mobile investigations.
Curious about AI? You’re not alone. In this special episode of AI Unpacked, we’re spotlighting the most thought-provoking, surprising, and impactful questions from the series so far—along with fresh ones you’ve submitted and want answered. From potential bias to practical applications, we’re tackling the topics that matter most in digital forensics today.
Whether you’re an enthusiast, skeptic, or just AI-curious, this episode is your chance to catch up, dig deeper, and join the conversation. Don’t miss this engaging wrap-up of insights, revelations, and real talk about artificial intelligence.
Certified SANS instructor Megan Roddie-Fonseca conducted an independent review of Magnet Nexus, a DFIR solution built to scale remote digital investigations. The report highlights the power of a cloud-native DFIR platform, including persistent agents, parallel acquisition and processing, and seamless cloud-based collaboration. Plus, see how Nexus and Magnet Axiom Cyber work together through a unique hybrid collection agent for end-to-end investigations across SaaS and on-premises environments.
We’re excited to announce the launch of Magnet Certification Preparation —a new series of reinforcement training designed to help qualified students confidently prepare for their certification exams.