Mac investigations can be challenging for a number of reasons. Learn about the Apple File System (APFS) and the changes made as part of the update from HFS+, while discussing the best techniques for successfully completing macOS investigations in Magnet AXIOM. In this lab we will not only discuss changes made with the latest macOS … Continued
Pictures, videos, and chats can all be key pieces of evidence in building cases for possession, distribution, and/or production of child sexual abuse material (CSAM), solicitation of a minor, and related crimes. However, these data quantities can range well into terabytes or even petabytes as investigators evaluate the evidence across multiple cases. In this lab, … Continued
Whether you’re a new or a long-time user of Magnet Axiom, we want to make sure you know about some of the advanced functionality that Axiom has to offer to make your investigations easier. Have you tried Connections yet? If not, you might be missing out on an incredibly streamlined way to analyze your evidence. … Continued
The ongoing trend for many application services is transitioning to storing user data in the cloud, rather than on the user’s physical device. This cloud data can be vital to your examinations! Now, in Magnet AXIOM 3.10, we’ve added the ability to acquire and process data from a user’s Uber account. Uber is one of … Continued
Magnet AXIOM 3.10 is now available to download within AXIOM or over at Customer Portal. AXIOM 3.10 allows you to acquire from Uber, get new timestamps in Google search URLs, as well get more than 20 updated artifacts. If you haven’t tried AXIOM yet, request a free trial here. Acquisition from Uber Uber is a … Continued
Google Search URLs have always been a gold mine of information to forensic examiners. Not only can you get a lot of detail on the search itself but there’s a plethora of timestamps potentially available with these searches as well. Historically, AXIOM has always recovered the Date/Time from the source system (usually the Last Visit … Continued
As a part of the AXIOM 3.9 release, we’ve added a new Windows 10 artifact for examiners wanting to quickly visualize what a user’s desktop looked like at the time of imaging. Update within AXIOM or download AXIOM 3.9 over at Customer Portal today! Rebuilt Desktops is a new artifact that allows users to view an … Continued
With the recent releases of both AXIOM 3.8 and 3.9, we’ve added additional Mac support to parse the unified log for entries surrounding the use of AirDrop. You can review these AirDrop artifacts on both computer and mobile evidence sources. Make sure you’ve updated to the latest version of AXIOM so you can make use … Continued
With the release of Magnet AXIOM 3.0 in early 2019, we added to our world-class Windows support, by adding Mac support to Magnet AXIOM — including support for the newest version of macOS (10.15 — Catalina) as soon as it was publicly available. With these updates, we’re making it even more comprehensive for computer forensics … Continued
