Magnet Forensics has just released Magnet IEF v6.6, adding new Hex and Text Viewers for improved analysis capabilities, IEF Profile development which allows investigators to build and filter artifacts by ‘Persons of Interest’, and Examiner & Investigator Modes for IEF Report Viewer.
Magnet IEF v6.6 Resource Center:
- HEX & Text Viewer: Read Blog
- Profiles & Identifier: Read Blog
- Investigator & Examiner Modes: Read Blog
- Existing Customers: Upgrade to Magnet IEF v6.6
- Not a Magnet IEF User? Download a free trial
April 29, 2015 – Magnet Forensics, the global leader in the development of digital forensics software that recovers evidence from computers, smartphones and tablets, announced today the release of Magnet IEF v6.6. This release adds a number of new and advanced analysis features to IEF that will aid examiners in locating and validating recovered data. These features include Hex Viewer, Text Viewer, Profile development capabilities, Partial Artifact filter, Histogram View, and Examiner/Investigator Modes.
New Features for Validating Evidence
To assist users with artifact analysis, we have added a new Hex viewer to Magnet IEF. This new feature presents artifacts as hexidecimal data, allowing examiners to manually search for additional data and validate the location of their data on the hard drive. Hex Viewer will also allow examiners to see translated Hex values (i.e. Hex to ASCII) so they can view data as close as possible to the source.
Similar to the new Hex Viewer, Text viewer is a new analysis feature that translates underlying hexidecimal data into a text representation. Evidence can be verified from the Text view since data is appearing in a raw format. It also provides examiners with a simplified view of Text evidence, without the corresponding HEX data.
Enhanced Analysis Features
People are more connected now than they’ve ever been, meaning their activity is spread across multiple devices. With the new Profiles feature, Examiners can build profiles for Persons of Interest within their cases by associating identifiers (such as user names and email addresses), and filter artifacts associated with an individual user.
Examiner & Investigator Modes
We’ve introduced two new operating modes for Magnet IEF Report Viewer to better serve the needs of our users. Examiner Mode is a fully featured IEF report view with all the analysis and reporting features that allow examiners to dig deep into recovered data.* For non-technical stakeholders, Investigator Mode is a simplified view that allows users to review evidence without being exposed to complex data.
- Partial Artifact Filter: Examiners can filter artifacts by full or partial hits
- Histogram View: Graphical representation of artifacts types, which can be used for baseline comparison for similar case types.
Why aren’t there any artifact updates in this release?
Applications are changing constantly, so we decided to provide better support to our users by releasing artifact updates on a more frequent basis. Check out the latest artifact update that we released earlier this month: April Artifact Update.
To upgrade your license to Magnet IEF v6.6, visit the Customer Portal.
*Examiner Mode is active when Magnet IEF dongle is connected.