MAGNET IEF automates the discovery of digital forensic evidence.
A single IEF search intelligently parses and carves for hundreds of different types of digital forensic artifacts found in allocated and unallocated space on computers, smartphones and tablets.
Why Digital Forensics Experts Choose IEF
ONE SEARCH to recover hundreds of types of artifacts
IEF searches for hundreds of different types of digital forensic artifacts at one time. IEF’s intelligent search technique recovers more data from more locations. IEF takes care of data processing so you can focus on the investigation.
FIND MORE EVIDENCE from deleted space
IEF recovers more artifacts from unallocated space by extracting data from fragmented files that are not sequential, out of order, or missing entirely. Advanced validation techniques on carved evidence ensure low false positive rates, and the most accurate and complete data.
ALWAYS STAY CURRENT with MAGNET IEF Artifact Updates
Technology changes quickly, frequent artifact updates ensure IEF continues to recover evidence from new and updated applications. The team at Magnet Forensics dedicates tens of thousand of hours on artifact R&D every year.
IEF is great for finding the artifacts that are left behind, but would take forever to search for and carve out individually.
It’s really easy to use; basically just set it and forget it. When the searching is done, all you have to do is review the results and choose what is relevant and what isn’t and then create your reports.
― State of Connecticut Judicial Branch, United States
Find Internet Artifacts:
Recover evidence from 265+ types of Internet Artifacts from Windows and Mac computers.
Chat Apps Social Networking P2P File Sharing Web Search and
Search Toolbars Media Files Webmail Cloud Drives Mapping
Internet Explorer, Chrome, Safari, Firefox and others
Applications like GoogleTalk and Skype
Applications like Facebook and Twitter
Applications like Ares and Limewire
Search engine activity from applications like Google and Bing
Pictures and Video with EXIF data
Applications like Gmail and Hotmail/Outlook.com
Applications like Dropbox and Flickr
Google Maps Queries and Tiles and Bing Maps Queries
Find Business Applications & OS Artifacts:
Recover evidence from 58 types of Business Applications & OS Artifacts from Windows and Mac computers.
Artifacts like Outlook OST & PST files, mbox email archives
Artifacts including, and Microsoft Lync/OCS IM
Office application files including .doc, .docx, .xls, .xlsx, .ppt, .pptx., .txt, .pdf
Artifacts including user accounts, USB device history, lnk files, prefetch files, shellbags, jumplists, event logs and others
Live System Forensics:
The IEF Triage Module runs from a USB dongle and enables the forensic examination of live systems.
Conduct a quick on-scene search and pre-screen evidence to qualify computers for seizure and further examination.
• Supports Windows-powered computers
• ‘Quick Capture’ feature allows an investigator to capture RAM, live system artifacts, and run a quick search for evidence in a single step
Identified active full disk encryption like Truecrypt, Bitlocker, PGP and more
Network connections, Running processes, Connected network shares, drives and remote connections, Network Interfaces, Logged on Users, Scheduled Tasks and Services
I just ran IEF against an Android dump and got 2x the number of records in the results than I was getting with my other mobile forensic tools...
Magnet Forensics’ first cell phone attempt is a grand slam out of the park.
― Cynthia, Federal Law Enforcement Agency, United States
Find Mobile Artifacts:
Recover 165+ types of Mobile Artifacts from iOS, Android and Windows Phone powered smartphones and tablets.
Including SMS, Contacts, Mapping, Email, Pictures and Video, Call Logs and Voicemail, Downloads, Caches and Notes.