Tips & Tricks Webinars

Browse Our Tips & Tricks Webinars

We know many of you are currently working from home and engaging in free learning opportunities is more important than ever.

We are excited to provide you with a wide variety of Magnet Forensics Tips & Tricks webinars. These quick presentations will help you learn about new ways to improve your investigations, and you can find recordings of them below which you can access anytime.

Tips & Tricks Recordings

Tips and Tricks // Piece the Story Together with OS, Memory, and Other Artifacts

Learn how to correlate different artifacts with each other and see the connections that occur between data across multiple types of evidence including computer, mobile devices, memory dumps, external media, and cloud. Then pivot to timeline analysis to help pinpoint the exact offense or step through exactly how an incident occurred. In this Tips & Tricks session, Tarah Melton, Forensic Consultant, will walk through a case using Connections and the Timeline Explorer in Magnet AXIOM and show how artifact correlations and timestamps can help tell the story in your investigation.

WATCH NOW> 

Tips & Tricks // Loading Different Evidence Types into AXIOM

Loading evidence in AXIOM is pretty straightforward for most use cases but there are times that certain types of files or images could benefit from some added insight or knowledge on the image formats and the various ways they can be loaded into AXIOM to get the best results for your investigation. In this session we’ll go over some of the most common (and some not so common) ways you can load evidence into AXIOM and see how that may affect the artifacts that get searched, decryption capabilities, or processing speed. We’ll also look at images outputted from various tools and see how they may differ and some of the most common questions we get about them.

WATCH NOW> 

Tips & Tricks // Magnet Web Page Saver

Magnet Web Page Saver (WPS) is a perfect tool for capturing how web pages look at a specific point in time.  Join Jad Saliba, CTO & Founder of Magnet Forensics as  dives into common questions about WPS and digs into the functionality and use cases in this hands-on  tips & tricks session. WPS is especially useful in situations where the web pages need to be displayed in an environment where internet access is not available. Magnet WPS takes a list of URLs and saves scrolling captures (“snapshots”) of each page.  URLs can be typed in manually or imported from a text file or CSV file.  WPS produces an easy-to-navigate HTML report file containing the saved pages, with customized options. This feature is perfect for those web sites containing contraband where you need to pull the information quickly before the criminals alter or change the web page.

WATCH NOW> 

Tips & Tricks // Using Identifiers and Profiles in Magnet AXIOM

One of the best hidden features of Magnet AXIOM is Profiles. Profiles allow examiners to group particular unique identifiers found in their case and tie them to a particular person or device. This allows the user to build a persona from data found as part of the investigation and correlate this information across evidence sources. Once a profile is created, filters can be applied to find additional evidence across many sources (computer, mobile, cloud, etc…) about a person based on the identifiers tied to that profile. This can help uncover additional details about a subject that otherwise might have been overlooked by manually searching. Join Jamie McQuaid as he walks through how to build various profiles and apply them to different types of investigations.

WATCH NOW> 

Tips & Tricks // Utilizing Magnet Free Tools – RAM Capture & Process Capture

When it comes to capturing RAM what are the best ways to accomplish this? Should I use the command line? Or GUI? Should I include Process Capture.  What benefits would I get if I use Magnet Process Capture? Patrick Beaver from Magnet Forensics Professional Services team will dive into these key questions and help you uncover more evidence through memory acquisition with these free tools.

WATCH NOW> 

Tips & Tricks // Making Sense of the Media Mayhem with Mac & iOS

It’s estimated that there will be 1.4 trillion photos taken in 2020, with the bulk of those coming from mobile devices. Since 2009, more than1.5 billion iPhones have been sold globally making it easier than ever to capture, share and edit media files. Investigators can often gain valuable clues derived from recovered media file details. In this presentation, Trey Amick, Forensic Consultant Manager, will dig into the Photos application found on both iOS and macOS endpoints, and show examiners the level of detail they can provide in their media investigations.

WATCH NOW>

Tips & Tricks // Portable Case

One of the most important aspects in any digital forensic examination is the need to collaborate and discuss the findings from the case data with other stakeholders.  This can include attorneys, other investigators, Human Resources, clients, and more. AXIOM eases this collaboration via Portable Case, enabling those stakeholders the ability to review, tag, and comment on that data, then allowing the merging of those insights back into the main case file by the forensic examiner. Join Tarah Melton, Forensic Consultant, to learn how to create and utilize Portable Cases from AXIOM in your investigations for more efficient communication of forensic findings in your casework.

WATCH NOW>

Tips & Tricks // Dynamic App Finder

It is impossible for commercial forensic tools to be able to keep up with the support of the millions of new and updated applications available on mobile platforms today. Even still, this application data might be vital to your case. In this Tips & Tricks session, Tarah Melton, Forensic Consultant, will demonstrate AXIOM’s Dynamic App Finder (DAF), to show one method of parsing data from these unsupported applications efficiently though the AXIOM interface. Utilizing DAF, we’ll discover how to identify useful data from mobile databases and create custom artifacts to add into AXIOM to analyze alongside our other parsed data.

WATCH NOW>