Topic: Computer

White Paper: Magnet AXIOM and macOS/APFS

By

The Apple File System (APFS) is the latest file system to come from Apple, Inc. for their family of Macintosh computers, as well as iPhone, iPad, Apple TV, and Apple Watch. It supersedes the aging Hierarchal File System Plus (HFS+), adding many significant new features found in other modern file systems such as ZFS or … Continued

What Upcoming Mac Artifacts and Features You Can Expect

By

With Magnet AXIOM 3.0, we’re excited to expand your computer investigations with support for APFS and Mac artifacts—but that’s just the beginning! We’re continuing to work hard to add even more macOS capabilities in upcoming AXIOM releases, in addition to the ability to decrypt FileVault2 images, we’ve added artifact support for parsed user accounts information, … Continued

Overhauling Media Categorization in Magnet AXIOM 3.0 With New Project VIC/CAID Features

By

The release of AXIOM 3.0 has brought some exciting new features to assist in your forensic examinations! In addition to our new enhanced Timeline Explorer and our increased support for Mac and cloud artifacts, we’ve furthered our media categorization capability with our increased compatibility with Project VIC/CAID hash sets. Our redesigned media categorization makes it … Continued

Using the New Timeline Explorer in Magnet AXIOM 3.0

By

Almost any type of investigation can benefit from timeline analysis to help understand what the user or the system did during a given incident. Whether you’re trying to understand how a suspect distributed child exploitation material or are tracking malware pivoting across several systems in an intrusion, timeline analysis can help pinpoint the exact offense … Continued

APFS File System and New Mac Artifact Support in Magnet AXIOM 3.0

By

Magnet AXIOM is entering its third year, so, with Magnet AXIOM 3.0, we’ve really worked hard to make it a huge release, focusing both on supporting a new file system as well as adding a plethora of new artifact support. With a powerful new timeline explorer, redesigned media categorization (Project Vic/CAID), and added cloud support … Continued