The type of cases you deal with today likely involve a number of
different types of devices.

Magnet ACQUIRE's ability to collect evidence from a hard drive quickly and efficiently means you spend less time acquiring and more time examining.

Cut Through The Noise With <br/>Targeted Acquisition

Cut Through The Noise With
Targeted Acquisition

With the option to run a targeted acquisition, you get the areas of the hard drive most commonly known for containing important evidence. This means you can eliminate unnecessary files that won't really support your case from the beginning of your investigation.

Combined PC and <br/>Smartphone Acquisition

Combined PC and
Smartphone Acquisition

In addition to the acquisition of smartphones and tablets, Magnet ACQUIRE also has the ability to image laptops, desktop computers, and removable media like USB keys using two different methods of acquisition.

Experience what Magnet ACQUIRE can do for you in your next investigation.

Download Now

MAGNET ACQUIRE OFFERS A CHOICE OF
THREE EXTRACTION PROCESSES



Quick Extraction



Quick Extraction diagram

Option 1
Targeted Acquisition

A targeted acquisition is a logical image that contains important files for forensic analysis. During this type of image acquisition, Magnet ACQUIRE copies files such as system files, user profiles, and more into a single, compressed file. This option represents a logical image that contains important files for forensic analysis.



Full Extraction



Full Extraction diagram

Option 2
Entire Contents of the Drive

A full acquisition is a bit-for-bit copy of the entire hard drive, USB, etc, and it contains the entire contents of the drive, including unallocated and deleted space. This is different from a quick acquisition, which only copies the contents from select locations on the disk. This option represents a physical image of the drive.

Full Extraction diagram

Option 3
All Files and Folders

During this type of acquisition, Magnet ACQUIRE copies all logical files and folders into a single, compressed file. This does not include deleted files and/or content. This option represents a logical image of all the files and folders.



Supported Drives


Magnet ACQUIRE can obtain a full, quick and targeted images from HDDs, SSDs,
USB and SD flash drives, and other external drives. Windows, Mac OS, and Linux are
all supported. It is also compatible with most write-blockers.

IMAGE

OS

EVIDENCE

QUICK
Targeted Acquisition
Windows
Linux
OS X
Pagefile, hibernate file, master file table, USN journal, event logs, setup API logs, Windows registry hives, LNK files, User Profiles, prefetch files
System logs, home, sleep images, tmp, etc, and usr
System logs, home, sleep images, tmp, etc, and usr
FULL
Entire Contents of the Drive
All Files and Folders
Windows,
Linux, OS X
Windows,
Linux, OS X
A physical image of the entire drive
A full, logical files system that includes all files and folders. This does not include deleted files and/or content
QUICK

OS

EVIDENCE

IMAGE

Windows
Pagefile, hibernate file, master file table, USN journal, event logs, setup API logs, Windows registry hives, LNK files, User Profiles, prefetch files
Targeted Acquisition
Linux
System logs, home, sleep images, tmp, etc, and usr.
Targeted Acquisition
OS X
System logs, home, sleep images, tmp, etc, and usr.
Targeted Acquisition
FULL

OS

EVIDENCE

IMAGE

Windows, Linux, OS X
A physical image of the entire drive.
Entire contents of the drive
Windows, Linux, OS X
A full, logical files system that includes all files and folders. This does not include deleted files and/or content.
All files and folders

Ready to start using this free acquisition
tool in your next investigation?



MAGNET IEF CUSTOMERS

Download your free copy of
Magnet ACQUIRE – Community Edition 2.0

Log In Now

NOT A MAGNET IEF CUSTOMER?

Request your free copy of
Magnet ACQUIRE – Community Edition 2.0

Request Your Copy Now