Fresh off a recently completed Information Security Registered Assessors Program (IRAP) assessment, Magnet Review is now evaluated against the Australian Government’s Information Security Manual (ISM) at the “PROTECTED” classification level.
Most incident response teams are built to detect and contain threats, but not always equipped to fully understand the extent of the threat. This eBook explores the growing investigative gap between alert and answer, where key questions remain: how the attacker got in, what they did, and whether it can be proven. Learn why traditional … Continued
Learn how Magnet Witness simplifies video enhancement with a dedicated workspace, built-in filters, and transparent reporting to support faster, defensible investigations.
Key insights Magnet User Summit and Magnet Virtual Summit are coming back in 2027 to bring the latest in digital investigations to the community and our call for papers is now open. Magnet Virtual Summit will take place February 8–11, followed by Magnet User Summit in Austin, Texas from March 8–10. These events bring together … Continued
It isn’t “the drive is unreadable.”
It isn’t “they never got the discovery.”
It isn’t even “is that phone ringing inside the faraday box?”
While ransomware grabs headlines, business email compromise (BEC) quietly causes billions in losses every year. For private sector responders, these cases present unique investigative hurdles: social engineering, subtle logins, wire transfers, and abuse of legitimate SaaS features. This presentation dives into the forensic artifacts and investigative playbooks for BEC cases, including Office 365 sign-in logs, forwarding rules, OAuth abuse, and transaction metadata. We’ll explore how to triage compromised accounts, correlate access patterns with financial events, and present findings in a way that supports both containment and legal/regulatory needs. Whether you work in corporate IR, legal, or compliance, this session will equip you with the tools to tackle one of the most common—and costly—forms of corporate compromise.
I have spent a lot of time thinking about the places where digital forensics actually happens and not just where it is supposed to happen.
In enterprise digital investigations, every minute matters. The ability to work quickly and efficiently can make all the difference in resolving issues and mitigating organizational impact. Organizations are leaning into processes and solutions that prioritize automation for a more streamlined, integrated workflow that enables collaboration across multiple teams and stakeholders.
What artifacts do I collect? Where does the data reside? Do I have enough context to scope this incident? In real-world DFIR investigations, teams often piece together answers from multiple, disparate tools and that fragmentation has a cost. Analysts spend time extracting, correlating, and context-switching instead of advancing the investigation, containing the threat, and restoring operations.
As digital crime grows more complex, disconnected tools and delayed evidence can slow investigations. Magnet One changes that.
