Topic: Computer

Find Similar Pictures in Magnet AXIOM 4.0

By

Our engineers have been hard at work and as a part of the latest AXIOM release, we’ve added additional capabilities around Magnet.AI. Content-based image retrieval (CBIR) is a fantastic resource for investigators needing to find similar images, especially when working with multiple pieces of digital evidence that could contain hundreds of thousands of images.   Magnet.AI finds similar pictures based on a picture’s general attributes, rather than … Continued

Apple Warrant Returns in Magnet AXIOM

By

We wanted to show you some of the content that can be parsed, displayed, and searched in Magnet AXIOM from Warrant Returns. Let’s discuss Apple. Before loading an Apple warrant return, please ensure you use the Free Magnet Apple Warrant Return Assistant found on the Download Our Free Tools page, or using the instructions provided … Continued

Google G Suite in Magnet AXIOM Cyber

By

Google accounts with Workspace administrator privileges often have access to more data than typical user accounts. With an Administrator account, not only can you access user account Gmail and Drive contents but also audit lots providing more in-depth analysis into your Workspace environment. When utilizing Workspace administrator privileges, you can choose to access data from … Continued

A Few Mac Artifacts You Should Be Paying Attention To

By

Since we announced our support of MacOS with AXIOM 3.0 in March 2019, we’ve continued to strengthen our support for Mac investigations with every release since then. With the release of AXIOM 3.11 around the corner—which will have support for even more Mac artifacts—we thought it would be a good opportunity to catch up with … Continued

Analyzing Timestamps in Google Search URLs

By

Google Search URLs have always been a gold mine of information to forensic examiners. Not only can you get a lot of detail on the search itself but there’s a plethora of timestamps potentially available with these searches as well. Historically, AXIOM has always recovered the Date/Time from the source system (usually the Last Visit … Continued

Exploring the New Rebuilt Desktop Artifact in Magnet AXIOM

By

As a part of the AXIOM 3.9 release, we’ve added a new Windows 10 artifact for examiners wanting to quickly visualize what a user’s desktop looked like at the time of imaging. Update within AXIOM or download AXIOM 3.9 over at Customer Portal today! Rebuilt Desktops is a new artifact that allows users to view an … Continued

Following the AirDrop Breadcrumbs with AXIOM

By

With the recent releases of both AXIOM 3.8 and 3.9, we’ve added additional Mac support to parse the unified log for entries surrounding the use of AirDrop. You can review these AirDrop artifacts on both computer and mobile evidence sources. Make sure you’ve updated to the latest version of AXIOM so you can make use … Continued