Preserving mobile evidence in St. Louis County
See how St. Louis County Police use Magnet Graykey and Graykey Preserve to address inactivity reboot timers and protect their ability to extract the critical mobile insights needed to close cases.
Content Industry: Public Safety
S3:E12 // A few of our favorite things: 12 artifacts to bring us investigative joy
As we wrap up season 3 of Mobile Unpacked, let’s take a look at our biggest artifact ‘wish list’ in investigations and how they can be our own holiday presents in our cases. In this episode we’ll explore the core components of 12 of our favorite artifacts that deserve their own time in the spotlight.
What the work leaves behind — and why I still fight for it
The same impulse that kept me running cases late into the evening as a digital forensics examiner is the one that now drives me to help agencies articulate their needs, justify investments in automation, and demonstrate the outcomes that funding can unlock.
Preserving evidence in the age of inactivity timers: When time becomes the threat
The pace of change in mobile technology is relentless, and with each new mobile OS release, digital investigators face fresh challenges in preserving and accessing vital evidence. The recent introduction of reboot timers in mobile operating systems has become an urgent race against time.
AI Unpacked #7: The human side of Magnet Forensics’ approach to AI
While artificial intelligence may be at the cutting edge of digital forensics, humans are still responsible for the creation of AI enabled tools.
Registration is open for Magnet Virtual Summit 2026!
This February, Magnet Virtual Summit is back, and set to spark a revolution in digital investigations. We are going through an incredible transformation period, and this is your chance to stay ahead of the latest challenges and opportunities with knowledge from experts and peers. On February 23-26, over 50 of the top names in the … Continued
Magnet Virtual Summit 2026 Capture the Flag
This challenge is a fantastic, gamified opportunity for professional development, allowing you to rigorously test your digital forensics skills.
S1:E3 // Proving who was holding the phone: Drafting warrants that explain the need for user attribution
Knowing what happened on a device is only half the story—proving who was behind the activity is critical.
Accident or arson? How Concordia Parish Sheriff’s Office uncovered the truth with Magnet Witness
Discover how a Louisiana sheriff’s office recovered critical video from a burned DVR and solved a suspected arson in record time using Magnet Witness. “You don’t have to go to a six-year-long class and have a PhD to understand how to use Witness. When I plug in a hard drive or any type of media, it just … Continued
When Windows takes a nap and leaves you evidence: Inside hiberfil.sys
Hiberfil.sys is one of those Windows artifacts every examiner should know about. It can contain a near-complete capture of system memory but is also tricky to collect and parse.