Topic: Lab Management

S3:E2 // IR Beyond Malware: Investigating Business Email Compromise and Fraud

By

While ransomware grabs headlines, business email compromise (BEC) quietly causes billions in losses every year. For private sector responders, these cases present unique investigative hurdles: social engineering, subtle logins, wire transfers, and abuse of legitimate SaaS features. This presentation dives into the forensic artifacts and investigative playbooks for BEC cases, including Office 365 sign-in logs, forwarding rules, OAuth abuse, and transaction metadata. We’ll explore how to triage compromised accounts, correlate access patterns with financial events, and present findings in a way that supports both containment and legal/regulatory needs. Whether you work in corporate IR, legal, or compliance, this session will equip you with the tools to tackle one of the most common—and costly—forms of corporate compromise.

Streamlined mobile workflows: Magnet One Case Stream for Verakey early access

By

In enterprise digital investigations, every minute matters. The ability to work quickly and efficiently can make all the difference in resolving issues and mitigating organizational impact. Organizations are leaning into processes and solutions that prioritize automation for a more streamlined, integrated workflow that enables collaboration across multiple teams and stakeholders.

Introducing Live Endpoint Explorer in Magnet Nexus: Triage in minutes, collect data with precision

By

What artifacts do I collect? Where does the data reside? Do I have enough context to scope this incident? In real-world DFIR investigations, teams often piece together answers from multiple, disparate tools and that fragmentation has a cost. Analysts spend time extracting, correlating, and context-switching instead of advancing the investigation, containing the threat, and restoring operations.

Building your public sector digital forensics lab

By

Digital forensics is as much about the hardworking people who bring their knowledge and experience to every case as it is about the technology. Having the right tools in place matters, but so do the processes, physical setup, and training that support them.

Bridging the air gap: Accelerating mobile forensics in secure, offline labs

By

Air‑gapped forensic labs are essential for protecting sensitive evidence—but that isolation often slows investigations. As mobile devices increase in volume and complexity, fragmented workflows and manual evidence transfer can create costly bottlenecks.
 
In this webinar, learn how modern mobile forensics teams are bridging the air gap without compromising security. Drawing on real‑world law enforcement lab workflows, we’ll explore how combining Graykey with Magnet Forensics mobile solutions enables faster extractions, streamlined processing, and scalable collaboration entirely within an offline environment.
 
See how Axiom Express Extraction, Graykey Fastrak, and automated processing workflows help labs free up access devices, run simultaneous extractions across multiple workstations, and deliver analysis‑ready mobile evidence faster—while preserving the integrity of an air‑gapped lab. Whether you’re tackling backlogs or planning to scale, this session shows how to unlock speed, efficiency, and confidence across your mobile forensics workflow.