Every examiner wants to know about deleted data in their investigation, often it can be an important piece to your case. Unfortunately, deleted data isn’t always available and if it is available, it may have different meaning depending on many factors such as the type of device (computer, mobile, cloud), the type of data (files, … Continued
Why test? When examiners have questions, the answers are often found through testing. Where do you start? How do you test? What about documentation? How do you share your findings with the community? Jessica will share the lessons she’s learned and the best practices and methodology she’s developed to properly, efficiently, and effectively research and … Continued
When full file system acquisitions are not available for iOS devices, several key artifacts will be missed from examinations. In order to obtain several of these key pieces for investigation, examiners should understand how to capture log files from the device as well as techniques to extract and analyze them. This presentation will discuss ways … Continued
In this blog we’ll discuss AXIOM Cyber’s ability to acquire from M1-based Mac endpoints, a new chip unveiled by Apple this year.
In the third article in his Cloud series, guest author Rick Whittington shares some tips for managing cloud workloads securely.
Wondering how to save time processing images in Magnet AXIOM? In this Tips & Tricks session, learn about ways to target your processing to get more rapid results. Join Jessica Hyde, Director of Forensics, as shows us how to do selective processing on a subset of locations of evidence, different search types, and how to use Artifact Profiles to target parsing and carving. By selectively targeting both locations processed and artifacts processed, an examiner can often get to the evidence more quickly. We will also demonstrate how to then process the additional artifacts and files not initially processed at a later time if necessary for your case.
Jessica Hyde shares the images and questions featured in the Magnet Weekly Capture the Flag (CTF) contest from October through December of 2020.
