When Windows takes a nap and leaves you evidence: Inside hiberfil.sys
Hiberfil.sys is one of those Windows artifacts every examiner should know about. It can contain a near-complete capture of system memory but is also tricky to collect and parse.
Hiberfil.sys is one of those Windows artifacts every examiner should know about. It can contain a near-complete capture of system memory but is also tricky to collect and parse.
Mobile devices can contain a wealth of digital evidence. This includes data that reveals a user’s location, communications, intent, and identity.
Mobile apps are central to how users interact with their devices—and they leave behind a rich trail of forensic evidence. In this episode of Mobile Unpacked, we’ll explore the full lifecycle of an app: how it gets installed, how to trace its origin, monitor its usage, and uncover what remains even after it’s been deleted. Whether you’re investigating user behavior or uncovering hidden data, understanding app artifacts is key to unlocking mobile evidence.
Not all products are available in all regions and may be restricted to specific customer types
Learn how a leading regional police force in the UK is using Magnet Review to strengthen chain of custody and enable faster arrests in major cases while also reducing the stress and workload of their investigative teams.
After the second episode of Legal Unpacked, a question came in that mirrors a frequent issue raised in court: A judge asks, “You obtained data from an application on the device, and from the cloud provider for data for the same account stored remotely. Can you explain to the court why the two sets of data don’t match?” The underlying assumption is that device data and cloud data should align. In reality, they are fundamentally different, and misunderstanding that distinction risks missing potential evidence.
Today’s world has become digital-first. That means that nearly every investigation federal teams perform now involves digital evidence—from mobile devices to cloud data to computers and more. The sheer volume and complexity of this data have made traditional forensic processes nearly impossible to scale.
This webinar explores not only why digital forensics has become mission-critical in federal investigations, but how automation can help transform the way agencies collaborate and work through digital evidence in their cases.
That means when teams collect, process, and review digital evidence, they can turn cases around faster—resulting in greatly reduced backlogs.
Join us to see for yourself how federal agencies are using Magnet Forensics Graykey, Graykey Fastrak, and Automate to accelerate justice and focus more time on what matters most: unlocking the truth.
Not all products are available in all regions and may be restricted to specific customer types
Magnet User Summit 2026 is getting closer, and we’re excited to share this year’s presentation catalog! We’ve got an incredible collection of presenters lined up ready to deliver sessions that will educate, empower, and inspire everyone joining us in Nashville on April 20-22. That includes insights from both the private sector and law enforcement about AI-driven solutions, navigating the latest mobile forensics challenges, cybersecurity, media authentication, reducing the demands of your investigations in the lab and so much more.
We’re thrilled to announce that Magnet One Mobile Case Stream—the first of a new class of workflow experiences we call case streams—is now available through early access for Online Magnet Graykey customers. Mobile Case Stream is a revolutionary mobile forensics experience that turns mobile devices into instant sources of truth. If you haven’t already joined the early access program, we encourage you to try it out to experience the future of mobile evidence processing firsthand. Why speed matters in digital investigations In criminal … Continued
In this Mobile Minute we look at the new Mobile Case Stream – a streamlined new workflow that lets you share mobile insights in just minutes. Mobile Case stream combines the unmatched mobile access capabilities of Magnet Graykey and the seamless case collaboration of Magnet Review to accelerate every step of your mobile investigations.
Mobile Case Stream combines the power of the Magnet One platform, the unmatched mobile access capabilities of Magnet Graykey, and the seamless case collaboration of Magnet Review to accelerate every step of your mobile investigations.