Get New And Updated Free Tools From Magnet Forensics

Magnet Forensics is proud to offer a brand-new free tool to your toolkit, the MAGNET Custom Artifact Generator! We’ve also made big updates to two of your existing favorites: the MAGNET Web Page Saver and MAGNET Encrypted Disk Detector. Better yet, they’re all free!

You can download all of our Free Tools over at the Free Tools page of our website.

Over the years, we’ve always tried to find ways to provide helpful tools to the community wherever we can — whether it’s the MAGNET App Simulator, MAGNET Process Capture, or our consistently popular Magnet ACQUIRE too. We’re happy to keep that tradition going with these newly released Free Tools — read all about them below.New: MAGNET Custom Artifact Generator

Download MAGNET Custom Artifact Generator here.

The new MAGNET Custom Artifact Generator (MCAG) tool makes it easy to create custom artifacts for use within Magnet AXIOM from CSV (and other delimited files) and SQLite databases. This means you can now build your own custom artifacts to bring data into AXIOM from other sources without needing to know XML/Python or Magnet’s API for custom artifacts.


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

We know that examiners are always looking for ways to bring more data from multiple sources into AXIOM, many times in unsupported formats. Custom artifacts are a very powerful extension to Magnet AXIOM that can make this possible, but they would often require time and some programming knowledge to create.

With the MAGNET Custom Artifact Generator, that process is now simplified so you don’t need programming experience to help unlock their power.

Key Features:

– Supports CSV/Delimited files (tab-separated, space-separated, or custom delimiters) and SQLite databases
– Allows you to configure timestamp fields and other categorization fields and set data types
– GUI/Wizard-driven, so no coding experience required
– Generated custom artifacts can be saved directly to AXIOM

For a detailed review of MAGNET Custom Artifact Generator check out this blog from our Director of Forensics, Jessica Hyde.

MAGNET Web Page Saver v3.0

Download MAGNET Web Page Saver v3.0 here.

MAGNET Web Page Saver (WPS) is perfect for capturing how web pages look at a specific point in time. We’ve brought a lot of new features to WPSv3.0 including:

– New SQLite output option: Everything captured goes into a single SQLite database file and a custom artifact is saved to the output folder, enabling you to ingest that SQLite database (or any WPS-generated SQLite database) into AXIOM
– Ability to save linked/embedded images and videos (.jpg, .mp4, .png, .bmp, .gif, .avi, .mpg, .wmv, .jpeg, .mov, .m4v, and .flv extensions) from captured web pages to individual files that are easy to scan/hash with Magnet AXIOM afterwards
– Web browser interface included to allow for logging into sites/creating sessions prior to starting a capture
– Enables Ad-hoc/manual capture of pages, browsing to sites manually and capturing as you go
– View progress for long captures when in the automated capture mode
– New option to save raw HTML content from captured web pages in addition to the screen capture
– New Chrome-based browser/browser engine for displaying and capturing pages – supports all modern pages and doesn’t rely on what you have installed on your machine
– Updated PDF support with improved capture and new options, including auto-bookmarking and enable/disable links in the PDF
– New link to the capture log in the HTML report

MAGNET Encrypted Disk Detector v3.0

Download Encrypted Disk Detector v3.0 here.

Encrypted Disk Detector (EDD) is a command-line tool that can quickly and non-intrusively check for encrypted volumes on a computer system during incident response.

New Features include:

– Overall performance and stability improvements
– VeraCrypt support added
– You can now specify a single drive to be checked for encryption:
Bitlocker, TrueCrypt, PGP, SafeBoot, and VeraCrypt detection are supported in this mode
This allows EDD to be used in an AUTOMATE workflow to check a drive/mounted image for encryption in order to determine next steps in the workflow
– Enhanced information displayed for drives

Download all of our Free Tools over at the Magnet Forensics Free Tools page!

Leave a Comment

Latest Videos

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools. 

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

In this episode of the Forensic Focus podcast, Si and Desi explore how artificial intelligence is being leveraged to uncover crucial evidence in investigations involving child sexual abuse material (CSAM) and examine the importance of exercising caution when implementing these tools.

They also discuss a recent murder case in which cyber experts played a vital role in securing a conviction, and explore the unique challenges associated with using digital evidence as an alibi.

Show Notes:

A Practitioner Survey Exploring the Value of Forensic Tools, AI, Filtering, & Safer Presentation for Investigating Child Sexual Abuse Material (CSAM) - https://dfrws.org/wp-content/uploads/2019/06/2019_USA_paper-a_practitioner_survey_exploring_the_value_of_forensic_tools_ai_filtering_safer_presentation_for_investigating_child_sexual_abuse_material_csam.pdf

Man charged with NI murder ‘faked live stream to provide alibi’ (The Guardian) - https://www.theguardian.com/uk-news/2023/feb/02/man-charged-with-ni-faked-live-stream-to-provide-alibi

A YouTuber accused of murder faked a 6-hour livestream to produce an alibi (Sportskeeda) - https://www.sportskeeda.com/esports/news-a-youtuber-accused-murder-faked-6-hour-livestream-produce-alibi

European Interdisciplinary Cybersecurity Conference (EICC) 2023 - https://www.forensicfocus.com/event/european-interdisciplinary-cybersecurity-conference-eicc-2023/#more-493234

YouTuber reportedly faked GTA livestream to have an alibi while he committed murder (Dexerto) - https://www.dexerto.com/entertainment/youtuber-reportedly-faked-gta-livestream-to-have-an-alibi-while-he-committed-murder-2052974/

Forensic Europe Expo - https://www.forensicfocus.com/event/forensic-europe-expo/#more-493225

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_7QiFTiuY7Vw

AI In CSAM Investigations And The Role Of Digital Evidence In Criminal Cases

Forensic Focus 22nd March 2023 12:44 pm

Throughout the past few years, the way employees communicate with each other has changed forever.<br /><br />69% of employees note that the number of business applications they use at work has increased during the pandemic.<br /><br />Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.<br /><br />Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.<br /><br />Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.<br /><br />With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.<br /><br />Join Monica Harris, Product Business Manager, as she showcases how investigators can:<br /><br />- Manage multiple cloud collections through a web interface<br />- Cull data prior to collection to save time and money by gaining these valuable insights of the data available<br />- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box<br />- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee<br />- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 20th March 2023 12:00 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...