Customer stories

Magnet Forensics’ customers are doing some of the most important work in the world. Their tireless pursuit of justice is inspiring, and we develop our products to make sure they have everything they need to get to the truth.

View all case studies

Magnet customer spotlight

Metafor LLC customer story

Metafor LLC

“Having tools like Verakey to access the data… without it, nothing else, none of the analysis would take place.”

Mike McGowan Principal, Metafor LLC

Digitas Consulting customer story

Digitas Consulting

“I’ve used Magnet products across two careers, both with the federal government and now in the private sector, and that says a lot. Magnet still has my business.”

Craig Bowling President & Founder, Digitas Consulting

Garrett Discovery customer story

Garrett Discovery

“We’ve been with Magnet Forensics for the last decade. I don’t think we would exist without them.”

Andrew Garrett CEO, Garrett Discovery

Toronto Police Service customer story

Toronto Police Service

“When we work with that large of an amount of data, using a tool like Magnet Witness allows us to very quickly identify and acquire exactly what the investigators are asking for.”

Darryl Branker Detective, Toronto Police Service

Fairfax County Police Department customer story

Fairfax County Police Department

“It’s the first time in the history of Fairfax County PD that the backlog has come to people getting returns on devices within a week.”

Steven Randazzo Fairfax County Police Department

Las Vegas Metro Police Department customer story

Las Vegas Metro Police Department

“Before we became a Magnet Forensics customer, our solve rate for homicides was hovering between 55 and 65%. We’ve pushed our solve rate up to around 95% consistently for the last five years.”

Allen Larsen Commander, Las Vegas Metro Police Department

West Midlands Police customer story

West Midlands Police

“There’s so much disinformation and synthetic media now available, it’s really vital that we provenance the evidence we’re using to make sure it is what it says it is and Magnet Verify is the tool that we can utilize to do that. It’s a vital part of our toolkit.”

Simon Hensley Police Inspector, West Midlands Police

Vigo County High Tech CyberCrime Unit customer story

Vigo County High Tech CyberCrime Unit

“Review looks and feels just like Portable Case. As long as investigators have a computer with a web browser they can login and view their evidence from anywhere.”

Jason James Director, Vigo County High Tech CyberCrime Unit

ALERT Alberta Law Enforcement Response Teams customer story

ALERT – Alberta Law Enforcement Response Teams

In this video, we showcase the incredible dedication of the people within ALERT to protect victims, particularly of child exploitation. We followed the team as they executed a warrant to arrest a suspect for downloading CSAM and talked to them more about what drives them to do this work, day after day.

Previous page
1
2
3
4
5
6
7
8
9
10
11
12
Next page

Case studies by industry

The nature of crime is evolving, whether you’re a corporate or law enforcement examiner, you are faced with the growing complexity of digital forensics investigations.

Read some examples from real customers talking about their work and how we were able to help.

Metafor uncovers more mobile evidence across encrypted apps with limited disruption

Learn how Metafor leveraged Magnet Verakey to access encrypted mobile data, uncover key evidence, and improve investigation outcomes.

La Policía Nacional de Ecuador combate el crimen organizado con herramientas de análisis forense digital que son «fundamentales»

La Policía Nacional de Ecuador resuelve casos complejos más rápido gracias a las soluciones de Magnet Forensics.

Fairfax County PD clears device backlog, shares evidence in minutes with cloud-powered workflow

Fairfax County PD eliminated a backlog of more than 80 devices and reduced evidence turnaround times from months to days with Magnet One. By centralizing case and evidence management in a cloud-based workflow, investigators gained faster access to digital evidence, improving collaboration and helping cases move forward more quickly.

Vigo County High Tech CyberCrime Unit speeds case closure times with secure evidence sharing

Discover how Vigo County HTCU streamlined their digital investigations and reduced delays with secure evidence sharing.

Rochester PD cuts time-to-evidence and advances victim protection with Magnet One

See how Rochester PD used Magnet One to cut time-to-evidence from weeks to hours and accelerate victim protection efforts.

Seattle PD innovation fuels faster rescues, resilient investigators, and stronger prosecutions with Magnet Griffeye® Enterprise

Every week, the Washington ICAC Task Force receives hundreds of cyber tips, each carrying the potential to rescue a child. To keep pace, Seattle PD adopted Magnet Griffeye® Enterprise as a central hub for digital media intelligence—enabling faster collaboration, smarter triage, and built‑in safeguards for investigator wellbeing.

Statewide agency preps for faster casework through cloud transition with Magnet Forensics

Serving agencies across the state, the Georgia Bureau of Investigation (GBI) is ready to move beyond backlogs and thumb drives. GBI partnered with Magnet Forensics to chart a path forward with a cloud-based digital forensics platform, building on years of experience with Magnet tools.

Preserving mobile evidence in St. Louis County

See how St. Louis County Police use Magnet Graykey and Graykey Preserve to address inactivity reboot timers and protect their ability to extract the critical mobile insights needed to close cases.

Media fraud exposed: The Aim Games’ journey to fair play

The Aim Games faced a surge in fraudulent media submissions, threatening the integrity of their global competition. Learn how Magnet Forensics and The Aim Games automated media authentication accurately, restoring trust and efficiency.

Accident or arson? How Concordia Parish Sheriff’s Office uncovered the truth with Magnet Witness

Discover how a Louisiana sheriff’s office recovered critical video from a burned DVR and solved a suspected arson in record time using Magnet Witness.“You don’t have to go to a six-year-long class and have a PhD to understand how to use Witness. When I plug in a hard drive or any type of media, it just recognizes it.” — Lab Manager Detective Randy Gohn

UK agency reduces risk and cuts evidence delays with Magnet Review

Learn how a leading regional police force in the UK is using Magnet Review to strengthen chain of custody and enable faster arrests in major cases while also reducing the stress and workload of their investigative teams.

Reduce mobile workflow times by more than 40%

Mobile Case Stream combines the power of the Magnet One platform, the unmatched mobile access capabilities of Magnet Graykey, and the seamless case collaboration of Magnet Review to accelerate every step of your mobile investigations.

How Magnet Forensics helped the Metro Nashville Police Department eliminate case backlog, boost efficiency, and secure evidence—delivering a 205% ROI.

The Metropolitan Nashville Police Department (MNPD) faced mounting pressure from a growing volume of digital evidence and having manual workflows.

Nardello & Co. meets the demands of remote, complex cases with Magnet Nexus

Discover how Nardello & Co., a global investigations firm, leveraged Magnet Nexus to successfully investigate a remote cyber incident on a yacht at sea. This case study highlights the speed and flexibility of Magnet Nexus, enabling rapid, SaaS-based data collection and analysis without the need for on-site presence. Learn how Nardello delivered fast, clear results, eliminating travel delays and ensuring client trust, all within 12-24 hours.

HaystackID delivers in high-stakes investigations, backed by partnership with Magnet Forensics

HaystackID supports organizations of all sizes, including Fortune 100 clients, with fast, high-stakes digital investigations around the world. In this case study, Chief Information Security Officer John Wilson and VP of Forensics Rene Novoa share how Magnet Forensics helps their team stay ahead of evolving technology in mobile investigations, meet urgent deadlines, and deliver white-glove service using tools like Magnet Verakey. “Magnet helps us go into [high-pressure] situations and be confident that…we can help assuage the concerns our client is facing.” – John Wilson, Chief Information Security Officer, HaystackID

Rapidly accessing Android and iOS Devices

Learn how Eric Haines, Digital forensics supervisor at a Florida agency relies on Magnet Graykey to provide access to the mobile devices that make up 95% of the data sources his lab encounters to help them start extractions immediately to meet investigative demands and stay ahead of court deadlines.

Forensic analyst delivers breakthrough results with SaaS-based speed and collaboration

In this case study, Eric Williams, a forensics analyst at a global real estate investment company, talks about utilizing Magnet Nexus to dramatically reduce remote data collection times from days to hours, enabling real-time analysis and seamless global collaboration.

How Magnet Forensics’ integrated toolkit helps ALERT protect vulnerable children

In this case study, we talk to the digital forensics team, including Team Lead Allen LaFontaine, about their use of Magnet Forensics products and how they’ve been helpful in protecting the innocent—including Magnet Outrider for triage, Magnet Graykey for acquisition, Magnet Axiom for analysis, and Magnet Griffeye for categorization.

Protecting Las Vegas tourism with rapid mobile evidence collection

Learn how Zachary Johnson, Digital Forensics Lab Commissioned Supervisor at the Las Vegas Metropolitan Police Department (LVMPD) uses Magnet Graykey and Magnet Graykey Fastrak to quickly process a high volume of large mobile phones to quickly gain the insights needed to keep Las Vegas and its thriving tourism industry safe.

How MNPD solves cases faster with simultaneous extraction and connected review

Learn how the Metro Nashville Police Department added Magnet Graykey Fastrak and Magnet Review to their workflow to scale up their mobile extraction capabilities

Global energy leader closes more cases with reliable remote data collection

Learn how Jamie Stokes uses Magnet Axiom Cyber to simplify data collection and analysis across dispersed endpoints in climate and energy solutions.

How SLED helped solve the Murdaugh double homicide with key digital evidence

Read about Magnet Graykey and Axiom’s important role in gathering data and constructing a timeline of events in the South Carolina Law Enforcement Division (SLED) investigations, including the high-profile Murdaugh case.

Using integrated workflows of Magnet Forensics solutions to increase mobile output

Learn how the Citrus County Sheriff’s Office uses Magnet Forensics solutions to work more efficiently and accelerate their mobile investigations, leveraging the integration between Magnet GRAYKEY and AXIOM and collaborating with detectives using portable case.

Using Magnet Graykey Fastrak to overcome a persistent backlog and get to every case

Learn how Chris DeCarlo and his team use Graykey Fastrak to scale up their mobile extractions and provide timely evidence for investigating every case.

How Rochester Police use Magnet Graykey to access key mobile evidence

Read how the Rochester Police Department used Magnet Graykey to gain access to a suspect’s phone and secure the key evidence needed to close a brutal homicide case. “Since we acquired GRAYKEY, it makes life a whole lot easier. It’s phenomenal in helping us access the data on iPhones.” – Scott Ferro, Examiner, Rochester Police Department

Using Magnet Forensics solution for quick and complete mobile investigations

Learn how the Boulder County Digital Forensics lab uses Magnet Graykey and Axiom to streamline every stage of their mobile investigations, from access to analysis and collaboration with investigators and prosecutors.

Accelerating justice and boosting wellness with Magnet Automate

How a Southeast Asian country digital forensics team boosts examiner health and retention while delivering evidence to investigators in half the time with an innovative suite of digital investigation products.

How Envista Forensics extracts more data and streamlines digital investigation for timely, confident service to clients

Looking to streamline mobile investigations? Envista Forensics Technical Lead Jake Green explains how his team extracts more data, analyzes it faster, and delivers insights to clients–all in one place–with Magnet Forensics solutions. “The use of Verakey for consent-based full file system extractions of mobile devices is critical for our business as well as the digital forensics industry.” – Jake Green, Technical Lead of Digital Forensics, Envista Forensics

Magnet Forensics Training & Certification: Helping an agent relieve stress and bolster his reputation

In this case study, we share the story of Matthew Wingenbach, Special Agent, North Dakota Bureau of Criminal Investigation and his pursuit of keeping up with evolving technologies in investigating crime.

How Portland Police Made collaboration fast and easy for its investigative team to retrace the homicide by ‘How to Murder Your Husband’ author

Learn how Portland Police uncovered critical evidence with Magnet Axiom to help bring Nancy Crampton Brophy to justice.

Using Magnet Axiom Cyber to unravel complex business email compromise attacks

Many companies have experienced a drastic increase in business email compromise (BEC) attacks, surpassing ransomware as the most prevalent cybersecurity concern. And BEC attacks have grown exponentially more complex, with multiple layers of deception requiring modern DFIR solutions to unravel these complex threats. Using Axiom Cyber, Breadcrumb Cybersecurity have been able to accelerate the rate at which work through BEC cases, closing cases in half the time, helping their clients mitigate these costly threats. “For complicated BEC attacks, trying to efficiently unwind malicious parties, domains, and more becomes next to impossible without a tool like Axiom Cyber.”  – Brian Horton, CEO, Breadcrumb Cybersecurity 

How Nashville Metro Police eliminated their mobile device backlog and accelerated justice with Magnet Automate

Learn how Nashville Metro Police demolished their mobile device backlog and accelerated justice with Magnet AUTOMATE.

Greater Manchester Police completes digital investigations 9.5 hours faster with Magnet Automate

Like most law enforcement agencies around the world, the Greater Manchester Police (GMP) has seen an incredible increase in the volume of digital evidence year-over-year – almost all of their criminal investigations now involve a digital element. The GMP uses Magnet Axiom along with products from other providers to investigate digital evidence from mobile, computer, cloud, and other sources. Now, with Magnet Automate, they are able to integrate all of these tools to continuously move investigations forward while also freeing their digital investigators to focus on evidence analysis.

Solved: Pedestrian-Involved Vehicle Collisions

Discover how the St. Joseph County Cyber Crimes Unit used Magnet GRAYKEY to access and extract evidence that helped them solve a pedestrian-involved vehicle collision.

Solved: Serial Auto Theft Crimes

Discover how the St. Joseph County Cyber Crimes Unit used Graykey to access and extract evidence that helped them solve a series of auto theft crimes.

How Greensboro Police get criminals off streets faster with digital forensic tools

With an ever-growing volume of incoming devices, the time to examine these devices is becoming more limited. It can be challenging to optimize collection while gathering enough evidence for prosecution before moving on to the next case. Learn how Greensboro Police Department uses both Magnet Axiom and Magnet DVR Examiner to accelerate arrests with fast, easy digital evidence recovery and analysis, while also providing prosecution with clear and effective reporting with reliable results.

Multi-Victim CSAM Case Solved

To combat a Child Sexual Abuse Material (CSAM) case, an agency turned to Magnet GRAYKEY to process multiple smartphones. This case study details the events of their investigation and how GRAYKEY helped bring justice to the victims. Note: Due to the sensitivity of this case, and to respect the victims, this case study is anonymous.

Recovering Video From a Waterlogged DVR

This case study features William Stumme, Senior Forensic Examiner of Surefire Cyber. On May 27, 2018, in Ellicott City, Maryland, flash flooding caused damage to businesses on the historic main street area, waterlogging many surveillance DVRs. Using DVR Examiner, data was able to be recovered and viewed from one such waterlogged DVR. Learn how Magnet DVR Examiner can be used to recover video and metadata from damaged and inoperable CCTV and surveillance DVRs.

Modern digital forensics tools: how new tools cut through the noise to find evidence

Magnet AXIOM is one of Detective Chad Gish’s go-to-tools and it’s part of what allows him to create the story of what has happened based on the data collected from digital devices.

Magnet Axiom Cyber review from DFIR Training: Some (Awesome) personal observations

Noted DFIR expert Brett Shavers provides an in-depth review of Magnet Axiom Cyber and how it can be useful in enterprise investigations. In this review, Brett reflects on his history with Magnet Forensics products and how they’ve been beneficial to the community over the years. Additionally, he explains some of the basic functions and advanced capabilities of Axiom Cyber, while also giving some tips on being successful in DFIR. “Request a trial of Axiom Cyber and, after reading this post, run it against another tool that you have. You will not regret the time to install, run, and be pleasantly surprised.” – Brett Shavers.

Making the Case from a Fire Damaged DVR

This case study comes from James Cadden of East Lansdowne Police. In early February of 2018, a suspected arson fire destroyed a 40-year-old family business. The fire damaged the DVR but he was able to acquire the evidence required to move the case forward with DVR Examiner. Learn how Magnet DVR examiner can be used to bypass passwords to recover video and metadata from CCTV and surveillance DVRs.

Magnet Axiom Cyber for Ransomware

It’s not a matter of if a ransomware attack will be successful, but when.

How the Portland Police Bureau Found 30% Time Savings on Each Case Using Magnet AUTOMATE

“One of the biggest, growing challenges all agencies face is the increasing volume of evidence coming into the lab for processing and analysis. No matter how many expensive workstations you purchase, or how hard you try to parallelize workflows, you’re still working cases on a one to one basis: one examiner to run one piece of evidence through the workflow” says Aaron Sparling, Officer, Investigations Branch, Digital Forensics Unit at the Portland Police Bureau. Download the case study to learn how Aaron reimagined the Portland Police Bureau’s digital forensics lab operations by utilizing Magnet AUTOMATE, an automation and orchestration platform, resulting in significant amounts of time saved across all cases and ultimately allowing their small team of examiners to focus on what matters most.

Training Annual Pass Helps Cybercrime Investigators Make the Most of Magnet AXIOM

Magnet Training definitely helped me as an investigator. I’m looking in different places now than before I got my Training Annual Pass. Without AXIOM, I wouldn’t have been able to find the evidence I needed in my cases, and Magnet Training helps me to know what AXIOM does and how it does it.Detective Constable Andrew McKeane, Cambridgeshire Constabulary

Industry case study: Financial services

It’s not a question of if a cyberattack will occur, but when. Cybersecurity and how to react to incidents are the top concerns for the majority of Financial Services leaders. And rightfully so, according to The Boston Consulting Group (BCG) the Financial Services industry is the most attacked industry in the world. Financial Services need a forensics solution that will help them easily identify how cyberattacks occurred so they can quickly meet regulatory compliance and remediate the effects of incidents as comprehensively as possible.

Industry Case Study: Technology

Technology companies are constantly in a state of agile transition and innovation to maintain their competitive edge. The by-product of that innovation is an overwhelming amount of data: intellectual property, customer data, confidential documents, and more. That data is not only invaluable to the companies that produce it, it’s coveted by bad actors both internal and external. Technology companies need a forensics solution that enable them to comprehensively investigate internal and external threats across all data sources including Windows and Macs, mobile devices, IoT devices, and cloud storage and communication apps.

Industry Case Study: Healthcare

Healthcare organizations face many different challenges. While adapting to new and existing regulatory standards, shifting technology landscapes, and the new realities introduced by COVID-19, healthcare is also faced with the challenge of managing the potentially devastating effects of cybersecurity attacks. Healthcare organizations need a forensics solution that will help them easily identify how cyberattacks occurred so they can quickly meet regulatory compliance and remediate the effects of security incidents as comprehensively as possible.

Simplify Data Exfiltration Cases with an Artifacts-First Approach

IT Group, a leading United Kingdom supplier of IT consultancy, forensic investigations and expert witness services, describes how AXIOM Cyber was used in a data exfiltration case. Magnet has revolutionized our digital forensic investigations. In time-critical investigations, the ease of processing and the user-friendly interface allow for quick filtering of the most relevant artifacts.” — George Jennings, Head of Digital Forensics & e-Disclosure, IT Group UK Limited

Building a Timeline of Events can Simplify Malware Investigations

A US Energy and Defense Corporation explains how AXIOM Cyber was used within a malware infection case. Timeline is a game changer for us! Using AXIOM Cyber’s Timeline feature, we were able to identify what happened within the malware infection. Honestly, I don’t think we would have found the details we were looking for if we were using another tool. We probably would have missed some of those events that we caught within the AXIOM Timeline. — DFIR Analyst, Cybersecurity Threat Analysis Center

Investigate HR-Related Cases with Speed and Ease using AXIOM Cyber

A Fortune 500 Financial Services Company explains how AXIOM Cyber was used to gather evidence in an HR-related case. Magnet helped us gather evidence to present to HR when an associate was accused of sending inappropriate and harassing messages and unsolicited explicit images to his co-worker. Using Magnet.AI we were quickly able to identify the explicit images in question plus some .mov files that helped to solidify the case. Had the investigation be done using another tool I probably would not have identified the .mov files as they were randomly named. — Digital Forensic Investigator

Use Magnet AXIOM Cyber to Investigate Fraudulent Email

A Fortune 500 Department Store Chain explains how AXIOM Cyber was used to investigate a phishing attack. Connections is my favorite tool for investigating Incident Response cases. I worked a BEC case where I had to examine OST and PST files. Using Connections I was able to quickly find where a zero-day phishing campaign originated. Without Magnet, I would have had to manually go through every email inbox.” — Cyber Fraud Analyst II, Threat Operations

Artifact-First Approach Closed a High-Profile Case in Taipei

Starting in October 2016, the Facebook page of Taipei City legislative councilor Ms. Wang was barraged with verbal abuse, harassment, bombing threats, and indecent pictures from nearly 200 false Facebook accounts. Download the case study to learn how Magnet Forensics’ focus on artifacts lead to more evidence and helped close this high-profile case.

Finding Mobile Evidence to Present in Court

Finding and analyzing relevant data from unsupported apps, staying informed on new and updated apps and artifacts, and password protection on encrypted devices, are all significant challenges for examiners working cases on which 75 percent of relevant evidence comes from smartphones. Whether examiners can find and analyze all relevant data quickly enough impacts whether they can deliver results to stakeholders in a timely fashion.

Consistent, User-Friendly Mobile Forensics Results

Smartphones provide evidence in virtually all the violent crimes MPD detectives investigate, including Internet crimes against children (ICAC) and homicides. The drive to save victims and bring justice to their families makes it especially compelling for forensic examiners to overcome their main challenges, including password protection on encrypted devices, finding and analyzing relevant data from unsupported apps, and the ability to combine computer, cloud, and mobile examinations into one case.

Linking Multiple Devices in Central Ohio Crimes Against Persons

Det. James Howe performs digital investigations for his and other units, not only investigating homicides, but also other untimely deaths on a rotating basis. “I love that you’re able to do multiple images... phones and PCs together ...I wouldn’t change a thing about it.” Download the full case study to read more.

Partnering to Reduce Digital Forensic Backlogs

Carol Gudbrandsen is responsible for supporting 42 agencies with their mobile device and computer forensic examinations. She’s also a member of the state’s Internet Crimes Against Children (ICAC) Task Force, which allows her to assist agencies that have no one at all to examine their digital evidence. “[Using AXIOM] I can show that I have only three cases waiting, not twelve, and I know I’ll deliver a short turnaround on those three.” Download the full case study to learn more.

How Magnet AXIOM Helped Save an Innocent Man From Federal Prison

Troy Schnack, a forensic examiner with the United States Federal Public Defender for the Western District of Missouri, explains how AXIOM’s timelining and artifacts-oriented approach were crucial to exonerating a man of federal child exploitation charges. “Without AXIOM, analysis would’ve taken five times as long...AXIOM made it easier to see that Windows Media Player opened this video on this date and time. You can bookmark that artifact for your summary and move on. No other tool combines all those artifacts like that.” Download the full case study to read more.

Complex Case Management and Reporting with Magnet ATLAS

The Indianapolis Metropolitan Police Department’s digital forensics lab has used Magnet ATLAS to manage complex cases with dozens of devices, and to report accurate statistics for grant funding.

Using Magnet AXIOM in Traffic Collision Reconstruction

The tragic consequences of texting while driving don’t always involve fatalities. In many cases they result in life-altering traumatic injuries. Such was the case in a 2013 collision in a New Jersey subdivision, in which a 17-year-old girl crossed the center line and hit a car carrying an older couple. The crash was severe enough to cause all three parties to lose consciousness, among other injuries. “I use AXIOM on every case, versus other tools. It parses in a more defined way, and has better search capabilities.” Download the full case study to read more.

Conducting Fraud Investigations with Magnet AXIOM

Alan Nelson, Founder and Managing Director of Dallas (Texas)-based Nelson Forensic & Advisory Services, LLC, has used AXIOM in several investigations and recommends it to any certified public accountant (CPA) or certified fraud examiner (CFE). “AXIOM is a handoff from traditional or old-school paper reviews, allowing you to quickly and seamlessly focus on certain artifacts with evidence so that you can get to the end much more quickly.” Download the full case study to read more.

Houston County Sheriff’s Office: Finding More Evidence, Faster, with Magnet AXIOM

Lt. Darin Meadows has been focusing on digital forensics for the last 17 years, as he currently serves more than 130,000 residents in Warner Robins, Georgia as part of the Houston County Sheriff’s Office. “It pulls data that sometimes I don’t get using other products, so it’s been very beneficial.” Download the full case study to read more.

How a Major Police Department in the U.S. Used Magnet ATLAS to Improve Case Management Efficiency

The members of the Cyber Crimes Section of one of the three largest Police Departments in the United States know firsthand that the demands for digital forensic services can be challenging for any law enforcement agency. They used Magnet ATLAS to help make sure requests were handled in a timely and effective manner.

How Magnet AXIOM Helps Deliver Justice in South African Criminal and Civil Cases

As a small information technology service provider based in South Africa, Craig Pedersen’s company, The Computer Guyz, is frequently called upon to offer digital forensics services for both public and private sector clients. Whether it’s corporate clients that need his team to acquire and process forensically sound digital evidence, a civil matter that morphs into a criminal case, or law enforcement that need support on a tough case, the importance of powerful tools cannot be overstated. “AXIOM’s 40-minute average processing time for cell phones is ideal when investigators seek accelerated results.” Download the full case study to read more.

Using Magnet AXIOM in Corporate Security Incident Response and Investigations

Chris Brinkworth, director of forensics and e-discovery, describes how his team at the Minnesota-based consulting firm uses Magnet Forensics products while offering enterprise information technology architecture, cybersecurity assessments, and e-discovery and digital forensics. “Since making AXIOM their go-to disk forensics tool, Brinkworth estimates that AXIOM has cut his team’s evidence examination response time by at least half.” Download the full case study to read more.

Go-To Tool for Faster Results

AXIOM is the go-to tool for fast “low hanging fruit” results so that clients can make sound decisions in a timely manner. Examiners use it to retrieve data from a wide range of cloud services and encrypted devices, including smartphones. “I use AXIOM as my go-to tool for fast results in order to get ‘low hanging fruit’ to my clients as soon as possible so they can make quick sound decisions in a timely manner. [AXIOM is] fast and easy, very intuitive.” Download the full case study to read more.

Finding the Most Data in the Least Time

AXIOM has been able to recover images that other processing software was unable to locate, or located only limited data from. It’s also processed otherwise unsupported mobile devices, pulling data and putting it together better then other digital forensic software. “We use AXIOM in all of our digital forensic cases, whether it’s a mobile device or a computer. AXIOM pulls data and puts it together better then other digital forensic software out there.” Download the full case study to read more.

Cloud Collection and Analysis Made Simple

AXIOM Cloud makes triage fast and simple by retrieving selected data from the Cloud using Office 365 administrative credentials, finding important evidence faster, and recovering more evidence from deleted or unallocated space—including evidence of malicious acts of deletion. “I use AXIOM for cloud collection and analysis. It makes triage fast/simple.” Download the full case study to read more.

Investigative Agility and Powerful Reporting Help Save Costs

AXIOM is Siemens examiners’ go-to solution for looking at evidence quickly and effectively, and especially for presenting findings to non-technical HR and Legal quickly to save time and money. “AXIOM is our go-to solution for looking at evidence quickly and effectively. The software is quick, effective, and consistently improving to better meet the needs of investigators. With a recent case, AXIOM was able to quickly show us artifacts that allowed us to present to HR and Legal quickly to change the scope of the investigation. This change in scope allowed us to get a jump on the case in a direction that we may not have seen as quickly as we did. This allowed us to save the company a huge amount of money in litigation costs.” Download the full case study to read more.

Finding Evidence that Other Tools Miss

Examiners use AXIOM to rebuild chat history from popular—even encrypted—instant messaging and social media apps including WhatsApp, Snapchat, Grindr, Facebook, Instagram, and many others. By rebuilding messages into the familiar chat bubble format, AXIOM easily presents evidence to non-technical stakeholders like prosecutors, judges and juries. “I was able [to use AXIOM to] easily display chat communication between a suspect and their stalking victim. We utilize AXIOM as our secondary tool, sometimes importing other extractions into AXIOM Process. It is a good program with a variety of features not found in other tools, and the training is very extensive and useful. Friendly customer support, trainers, and sales reps.” Download the full case study to read more.

Mobile Forensics’ Life-Saving Capabilities

Police in the Trinidad and Tobago police use AXIOM to process smartphone evidence including unknown or hard-to-find artifacts, in one case saving a life by identifying a child exploitation suspect via Facebook chats on his phone. “[AXIOM] has helped solved several cases and saved a life. I was able to easily show chats between a victim and suspect in a child exploitation case and prove the use of a specific Facebook ID by the suspect which was found on his phone.” Download the full case study to read more.

Improving Case Turnaround Through Mobile Bypass

AXIOM bypasses device locks on thousands of Samsung, LG, and Motorola devices, as well as devices with MTK or Qualcomm chipsets. In addition, AXIOM loads images from third-party tools so that examiners can find more evidence from deleted or unallocated space. “We use AXIOM on every case that [it can] bypass or if the phone is unlocked. I don’t always have access to [the other forensic tools we use], so now that I can dump a phone and get a really good logical [acquisition, that] is a great help on our turnaround time.” Download the full case study to read more.

Reducing Time and Effort on Demanding Caseloads

AXIOM Cloud helps investigators to collect more data and build effective timelines across multiple data sources, including computer, cloud and/or mobile in a broad array of time-sensitive insider threat, intrusion, employee misconduct, and incident response cases. “Using AXIOM’s timeline view on Windows EVYX files, we were able to determine indicators of compromise within hours rather than days. AXIOM is the industry leader in digital forensics, a single source solution for mobile and computer forensics artifacts and unrivalled in Internet-based artifacts also.” Download the full case study to read more.

Finding More Evidence on Smartphones

Redding forensic examiners use AXIOM to ingest phone extractions from other tools. Magnet.AI helps them to automate evidence identification, while Connections automates the correlation of artifacts. “I have used Magnet for several years now and find that it does everything I need it to in both cell phone and computer forensics. After running [a competitive tool] for smartphone forensics, I always follow up with AXIOM if the case involves social media or internet artifacts that are sometimes missed by [the other tool]. I find AXIOM will always get more data from these sources. I also appreciate the prompt customer service and that Magnet is always open to suggestions to improve the product.” Download the full case study to read more.

User-Friendly Mobile Device Forensics

AXIOM helps homicide investigators to recover evidence from off-brand mobile devices and unsupported apps so that they can establish activities, timelines, and even intent. “AXIOM is the most user-friendly product I have used. I use it on a daily basis. It has become my go-to in every investigation where [technology] is used to track what was on a person’s mind or what the person was doing.” Download the full case study to read more.

Faster, Easier Corporate Investigations

AXIOM is easy to use for majority of high-level intellectual property and trade secret theft, as well as employee misconduct investigations. Examiners can acquire and parse a variety of artifacts from cloud, computer, and mobile, including audit logs, metadata, Torrent files, web pages, and chat. “[AXIOM] is truly a one-click solution vs. one of the competitors you have to process (takes a very long time) and then run scripts to find everything you are looking for. AXIOM is easy to use for a majority of high-level investigations.” Download the full case study to read more.

Investigating Intellectual Property Theft

IT Group is a leading United Kingdom supplier of IT consultancy, forensic investigations and expert witness services. Read how they used AXIOM to reveal the most essential artifacts when investigating intellectual property theft. “Magnet AXIOM has revolutionised [our] digital forensic investigations. In time-critical investigations, the ease of processing and the user-friendly interface allow for quick filtering of the most relevant artifacts.” Download the full case study to read more.

Leveraging Connections to Find Child Exploitation Victims and Suspects

AXIOM offers a way for the forensic lab to share compatible exports to local investigators across the country, helping them understand how the data can help them build their cases. “Since AXIOM provides the most relevant features for digital investigation, it remains solely a powerful tool [to share] compatible exports to further investigation. It leverages a single effective tool to offer seamless collaboration to local investigators getting in touch with lab scientists, without an obstacle of distance.” Download the full case study to read more.

Moving Quickly to Find Key Evidence

Thanks to AXIOM’s support for more than 1,000 artifacts and its carving of deleted, encoded, or encrypted data that other tools don’t find, examiners have used AXIOM to find and correlate more evidence from deleted or unallocated space. “I processed 28 devices using AXIOM, [which] allowed me to move quickly through the evidence to find what I was looking for. I found additional evidence that I would not have seen using [a competing tool]. AXIOM is the fastest, easiest way to see what is on a hard drive.” Download the full case study to read more.

Using Magnet AXIOM to Identify Artifacts for eDiscovery

AXIOM is vital to eDiscovery and litigation support because of its responsiveness to rapid technological changes, particularly the sheer number of artifacts it identifies, acquires, and analyzes. AXIOM offers a quick initial overview of generally relevant artifacts, providing good information delivery with minimal human time. “It is critical to act and respond to new developments in this field, and Magnet AXIOM is a product that is reliably in the forefront of identifying and cataloging the latest information. AXIOM is a good fast tool for quick initial overview of generally relevant artifacts. It is helpful for quick information delivery with minimal human time.” Download the full case study to read more.

Making ICAC Cases More Proactive with Magnet AXIOM

AXIOM pulls user accounts and correlates them with other account names by the same user. Examiners can then confirm which suspect possessed/used the device, and look for additional victims whom the suspect may have been communicating with. “It has certainly been helpful to use AXIOM to pull user accounts and correlate them with other account names by the same user. This not only has allowed us to confirm which suspect possessed/used the device, but also allows us to look for additional victims whom the suspect may have been communicating with.” Download the full case study to read more.

Scalable, Flexible Digital Forensics for Litigation Support

AXIOM has enabled services teams to find important evidence faster, including data from encrypted machines/devices, as well as cloud services using administrative credentials. Access to these and other data sources can demonstrate malicious intent vs. inadvertent access through the effective use of timelines and other tools. “AXIOM is the best forensic tool on the market. It is easy to use, thorough in its processing and exceptional in its reporting. I used it in a matter involving a significant amount of data in an arbitration where identifying and tagging many types of emails was necessary. AXIOM works flawlessly.” Download the full case study to read more.

How Upgrading to Magnet AXIOM Helped Crack a Case

A recent upgrade from IEF, AXIOM allows examiners to carve more pictures and browser history than other tools especially when used to process images extracted using GrayKey. In one ICAC case, the additional images and location information were instrumental to establish jurisdiction. In another case, AXIOM’s custom recovery images gave examiners privileged access to a Samsung tablet. “[This was our] first experience with AXIOM Process and [its] Custom Recovery Images. Worked great and [we were] able to gain privileged access to a Samsung Tablet and extract the data needed when others would not.” Download the full case study to read more.

Extending the Benefit of Mobile Forensics

The CPD mainly uses AXIOM for mobile forensics in ICAC investigations, but examiners have also used it to recover data from an in-car camera and to obtain text conversations in drug cases. AXIOM captures deleted evidence that would not otherwise be available. “I love how Magnet is always updating its software and reaching out to the consumer asking what we are looking for in the product and how they can best help us. The support from both technical support and other staff has been above and beyond.” Download the full case study to read more.

Finding Forensic Support Across Digital Devices

AXIOM’s newer support for passcode bypass on a variety of locked mobile devices—through the use of recovery images for Samsung and Motorola phones, and of download mode in some LG, MediaTek (MTK), and Qualcomm phones—has proven most valuable to Ministere examiners. “I tested AXIOM to analyze a physical copy of a Samsung Galaxy S6 with Android 7. I was satisfied entirely. UFED Ultimate was unable to support the extraction I got using TWRP on the [Galaxy S6]. AXIOM supported it easily and parsed useful artifacts effortlessly. I was able to give a well-presented case report to my colleague investigator.” Download the full case study to read more.

Start modernizing your digital investigations today.

Ready to explore on your own? Browse our products