Device users are no longer relying on default applications to communicate, often migrating to 3rd party applications with additional features. Unfortunately, these same types of applications can be used by actors involved in criminal investigations to encrypt and obfuscate their activities. In this webinar, join David and Trey, digital forensic experts from Grayshift and Magnet … Continued
There are several artifacts that can be decrypted with data from the iOS Keychain. In this Tips and Tricks, we will show you how to look at Keychain data, such as that available with a Keychain image and use that data to decrypt a data from different artifacts. In this session, Jessica Hyde will show you some processing best practices to help you be able to unlock more parsed results from the iOS Keychain.
Certain simple features in AXIOM are commonly overlooked, but they are extremely powerful when looking for that needle in the haystack. This session will go over some of those features, like column filtering, right-click functionality from the file system, relative time filter, saving HTMLs of chat messages, and more, and explain how they can be useful to your investigations.
With AXIOM and AXIOM Cyber 4.10, we’re helping you do more in your investigations with a number of new and updated artifacts!
This session will discuss how Magnet AXIOM’s integration of core plugins from the popular tool, Volatility, makes deep memory analysis more accessible to forensic examiners.
Introducing Load Files Beta for AXIOM Cyber. Easier Sharing of Portable Cases, New Export Customizations, and More with Magnet AXIOM and AXIOM Cyber 4.9
With AXIOM 4.9, there are four great new additions to enable you to further customize and control your exports.
Jessica Hyde, Director of Forensics, talks about Android Motion Photos, an artifact similar to Live Photo on iOS.
Every examiner wants to know about deleted data in their investigation, often it can be an important piece to your case. Unfortunately, deleted data isn’t always available and if it is available, it may have different meaning depending on many factors such as the type of device (computer, mobile, cloud), the type of data (files, … Continued
When full file system acquisitions are not available for iOS devices, several key artifacts will be missed from examinations. In order to obtain several of these key pieces for investigation, examiners should understand how to capture log files from the device as well as techniques to extract and analyze them. This presentation will discuss ways … Continued
