When time is of the essence, use Magnet AXIOM. On average, AXIOM processes evidence 40% faster than IEF and is up to 40 times faster when it comes to reviewing case data. Searching is also significantly faster in AXIOM than it is in IEF.

Whereas IEF supports HFS+, AXIOM supports both HFS+ and APFS as well as decryption of FileVault 2 encrypted drives, volumes, and partitions. Discover more macOS artifacts with AXIOM such as FSEvents and Bash History.

AXIOM has built-in acquisition capabilities for iOS and Android devices. AXIOM is the only Magnet Forensics tool that has the most robust features to bypass passwords and to extract full physical images on thousands of Android devices.

AXIOM has the most comprehensive support for cloud data. Acquire data from 50+ of the most forensically relevant social networks, cloud and email services. Analyze Facebook warrant returns, ingest user-requested archives from cloud services (Google and Facebook) and acquire publicly available information from Twitter.

Automatically visualize the relationships between files, artifacts, people, and devices using Connections.

AXIOM takes Timeline to the next level with the ability to build a timeline on all artifacts and file system data, categorize and filter Timeline events, and display unique row item for each date/time stamp.

Magnet.AI searches pictures and flags potential nudity, weapons, CSAM, extremist imagery, and more. Review chats and identify potential luring conversations.

Due to the built-in PList, SQLite, and file system viewers in AXIOM, examiners can review and analyze raw iOS data from GrayKey images that isn’t viewable in IEF.

Examiners can analyze memory by selecting artifacts and running Volatility that is directly integrated in AXIOM.