If you tuned in to the 2024 MVS presentation, “Logging La Vida Loca,” or Episode 14 of Mobile Unpacked, then you may be wondering where you can get a cheatsheet or copy of all the locations and types of logging data you can gather in your investigations. Well, look no further than this blog post!
Digital forensics labs around the world are recognizing the benefits of automation, helping them to accelerate their investigations, improve investigation quality, and reduce burden on their staff. With Magnet Automate’s Essentials tier, you’ve now got a way to automate your workflows faster, easier, and more cost effectively than ever.
Most modern electronic devices keep logs running that store information about who, what, when, where, and why processes are performed. Modern smartphones are certainly no different. In fact, certain artifacts can only be recovered by an in-depth review of these logging files.
The prominence of Pixel devices is on the rise, with the market share reported to have doubled in the US over the previous year, increasing the likelihood that you will encounter Pixel devices during your investigations. In this session, we will take a closer look at GRAYKEY’s recently announced full access support for the Google Engineered Pixel 6 and 8 series, and the constantly expanding coverage for Android mobile devices and operating systems.
With recent breakthroughs in Magnet GRAYKEY, we now have access to full file system images for iOS 17. This next episode of Mobile Unpacked will explore what these additional areas have given us in comparison to standard quick imaging or logical+ style imaging. Topics will include new/moved voicemail storage and transcriptions, the use of multiple SEGB formats, and more!
Investigators and prosecutors work closely together to protect nearly a million residents in Nashville—and digital evidence can play a crucial role in their cases. But, manually processing an average of three mobile devices for every case made backlogs inevitable, weighing heavily on everyone.
Within the first few months of using Magnet AUTOMATE in combination with Magnet AXIOM, Nashville Metro’s Criminal Investigations Division completely eliminated their mobile device backlog and dramatically reduced its time to evidence, now usually delivered within 24 hours
Join Metro Nashville’s Chad Gish for a walkthrough of his lab’s automated mobile workflows and see how AUTOMATE has helped him and his team to eliminate their mobile device backlog and accelerate justice.
iOS and Android devices are usually a plethora of media data, but what types of media data await an examiner? What is the difference between a HEIC and a JPEG, a PNG and a KTX, ProRes and ProRaw, or even a Live Photo versus a Motion Photo? Which types of media are going to be natively viewable, and which ones will require a special viewer?
Join Chris Vance in this next episode of Mobile Unpacked, where he will explore the different types of media files that are present on both Android and iOS devices including their proprietary formats and what each type of media file can tell us contextually about the data that awaits us.
Whenever an app ends up on a modern smartphone, it has to first ask for permission from the user for its functions. These permissions can be standard or considered ‘sensitive.’ Join us for this next episode of Mobile Unpacked with Chris Vance to learn how to use this information to track insights about the 3rd party apps installed on a device, what they have done or not done, and whether or not their behavior is malicious.
Mobile device artifacts are digital breadcrumbs: forensically valuable data created by a mobile device that help investigators better understand a case.
Application artifacts are an important data source in mobile device investigations.
