Flash Recovery Images To More Than 650 Samsung Devices With Magnet AXIOM

Magnet AXIOM 1.1.2 is now available — bringing with it enhanced integration with Griffeye and Project VIC, as well as significant developments in mobile acquisition, Portable Case, and BitLocker decryption.

Enhanced Integration with Griffeye and Project VIC
As we recently announced, AXIOM 1.1.2 will feature deeper integration with Griffeye and Project VIC for enhanced digital forensics analysis in child exploitation cases.Quickly add media files that have been categorized in Griffeye directly back into AXIOM for more holistic analysis and reporting, and get a simplified workflow that will save time and effort as you work to analyze and share all findings for the whole case with investigative teams – from categorized media files, to messages, to location and timestamped data, to system data.

Mobile Acquisition Updates
If a Samsung mobile device is locked or you can’t gain privileged access to it, you can now flash a recovery image to the device so you can acquire evidence from it — getting more data than if you performed a quick image. This will work on over 650 different Samsung devices, with more Samsung and other Android devices being added to future releases.

You can now also connect mobile devices and media devices that support the media transfer protocol (MTP) to acquire media content, downloaded content and basic app data.

And because newer versions of certain apps no longer back up files in Android, AXIOM now gives the option to downgrade Android applications to allow those apps’ data to be backed up by installing an older version of the app.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

Portable Case Improvements
Portable Cases generate more quickly than ever before, with overall sizes being 1GB smaller than in previous versions of AXIOM. In addition, AXIOM now leverages Turbo.net’s container technology to better manage dependencies on other technology or libraries, meaning that you will no longer need to have administrative access to view portable cases and you will not need to worry about installing all the necessary dependencies first.

Other Additions and Enhancements

1. AXIOM can now decrypt BitLocker encrypted evidence using the recovery key, which can be entered in the exact same field as the password is currently entered in.
2. Keyword searching improvements – ‘All content’ keyword searches are now three times faster and keyword hits from Unicode encoded evidence are now more reliable.
3. New artifacts – Get data from Shimcache, installed programs, and executed programs for Windows XP, Vista, 7, 8, 10 — showing whether certain applications have been installed and deleted to prove intent, and providing a stronger timeline analysis.

AXIOM customers can download the latest version of the Customer Portal now. Interested in learning more about AXIOM? Visit the Magnet Forensics website and sign up for a free 30-day trial.

Leave a Comment

Latest Videos

Digital Forensics News Round Up, February 28 2024 #digitalforensics #dfir

Forensic Focus 8 hours ago

Digital Forensics News Round-Up, February 21 2024 #digitalforensics #dfir

Forensic Focus 21st February 2024 6:19 pm

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts. 

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director 
43:45 – Privacy of user data

Alan Platt, Professional Services Consultant at MSAB, discusses his experience as a former UK police officer working in digital forensics. He talks about the different levels of digital forensics capabilities within police forces and how MSAB products like XAMN and XEC Director are used by frontline officers versus lab analysts.

The discussion covers how MSAB partners with law enforcement to develop custom workflows for mobile device acquisitions that facilitate ISO compliance. Alan explains MSAB's managed service offering, where approved MSAB staff can remotely access a customer's XEC Director server to assist with software updates and troubleshooting. He emphasizes the strict data segregation policies enforced by customers to prevent MSAB from accessing any sensitive case data.

Looking ahead, Alan mentions MSAB's new CEO and hints at some exciting developments coming down the pipeline. He spotlights recent enhancements to XEC Director's speed and database functionality for managing large estates of networked Kiosks. Alan also plugs the new XEC Director training he created to help users fully leverage the platform's capabilities.

00:00 – Introduction to Alan Platt
07:00 – Training
12:00 – Workflows
17:20 – Ensuring a secure environment
19:45 – Customer training
20:35 – Helping customers comply with ISO accreditation
25:00 – Validation and verification
27:30 – ISO standards
30:00 – MSAB’s pipeline plans
32:40 – XEC Director
43:45 – Privacy of user data

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_ifoHVkjJtRc

How MSAB Is Managing The Digital Forensics Challenges Of Frontline Policing

Forensic Focus 21st February 2024 3:07 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles