In this blog we’ll discuss how examiners can now create their own custom Targeted Locations with AXIOM Cyber, saving you time by eliminating the need to navigate the file tree for artifacts that are frequently needed in casework. If you haven’t had the opportunity to try AXIOM Cyber yet, make sure to request a free … Continued
Users can ingest Office 365 unified audit logs that are manually exported from Microsoft’s Security & Compliance Center into their casefiles for analysis in Magnet AXIOM Cyber. In earlier releases of AXIOM Cyber, examiners could collect directly from O365 environments via live acquisition, however we understand data is sometimes provided to investigators, versus them having … Continued
As many of us know, Slack has become a dominant collaboration and chat platform used in environments around the globe since its inception in 2009. With over 10 million daily active users and 85,000 paying customers, examiners are frequently facing casework where Slack data plays a pivotal part in the investigation. In this blog, we’ll discuss the different options examiners have when investigating Slack with Magnet … Continued
Incident Response, like juggling flaming dumpsters or swallowing swords, is not for the faint of heart. When was the last time you did a collection where everything went exactly right? Or your analysis didnʼt encounter a massive hitch? Join your ringmasters, Heather and Shelly, on an exciting trip to the IR Circus! Weʼll share tips … Continued
Los riesgos y desafíos dentro del ámbito corporativo están en incremento ante nuevos escenarios como es el trabajo remoto, donde temas como el fraude, robo de información sensible o amenazas externas como ataques de malware y ransomeware, precisan de investigaciones integrales donde la evidencia se pueda adquirir, analizar y reportar rápidamente. Únase a nuestro webinar … Continued
One of the biggest handicaps to device acquisition and analysis is getting information from devices that are not geographically feasible, or time is not on the investigator’s side. In the past, the only method of collecting mobile devices was either through on-site collections or through various cloud management solutions. This gives a person-of-interest time to … Continued
macOS has created roadblocks for examiners for years. Investigators must contend with not only hardware-based encryption like the T-2 chip, to System Integrity Protection (SIP), which prevented disk and write access to specific directories across the Mac. Now with macOS Catalina (10.15) we find even more complications with the addition of a new read-only volume … Continued
This Free AXIOM Cyber Interactive Training will take two hours and will include tips and tricks on streamlining your investigative workflow. We’ll cover using AXIOM Cyber for your investigations focusing on remote collections with Windows and macOS devices with an ad hoc agent. Join us to learn about how to quickly and covertly perform collections. … Continued
sics, but your department won’t buy the mac forensics tools? You have a mac with the T2 chip and can’t image with conventional imagers?
Ransomware attacks can present an existential threat to a targeted organization, and over time they have morphed and changed, becoming ever more sophisticated. With global ransomware attacks estimated as high as 204,000,000 incidents in 2018, this is not only a problem that is not going away soon, but one where prevention efforts are widely missing … Continued
