Get Uber Acquisition And Timestamps In Google Search URLs In Magnet AXIOM 3.10

Magnet AXIOM 3.10 is now available for AXIOM users! Get Magnet AXIOM 3.10 today to acquire from Uber, get new timestamps in Google search URLs, as well get more than 20 updated artifacts.

If you haven’t tried AXIOM yet, request a free trial here.Acquisition from Uber
Uber is a perfect example of the recent trend among apps to have more and more data stored on the Cloud versus devices themselves.

When dealing with a consenting individual that has access to their phone, you can now acquire their cloud Uber data using Magnet AXIOM 3.10— including details of each trip the user has taken using Uber (such as start and end addresses, times, and coordinates.) This can be helpful to place the user at a specific location at a given time.

Timestamps in Google Search URLs
Building on AXIOM’s strong support for examining search history, you can now get even more information from Google search histories.

Two new evidence items can be analyzed in Magnet AXIOM 3.10:

Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.

Unsubscribe any time. We respect your privacy - read our privacy policy.

– Previous Page Load Date/Time (sxsrf= value): this timestamp reflects the time when the page ( was loaded prior to the actual search was conducted
– Page Load Date/Time (ved= value): this timestamp reflects the time when the actual search was conducted

This timestamped data is in the Google search URL itself and can help you draw conclusions about how a user’s browsing habits.

Learn more in this how-to from Jamie McQuaid.

Passware Updates Improving McAfee Encryption
We’ve updated our Passware integration, which included minor improvements to supporting McAfee encryption. Passware (and therefore AXIOM) now supports up to version 7.2.2.x of McAfee.

With AXIOM 3.10, mounted drives are now scanned properly and passed to Passware accordingly and returned decrypted .

Additionally, we’ve also updated AXIOM to allow for editing column filters in Examine.

Artifact Updates

– Google Searches (macOS/Windows)
– Videos (macOS/Windows)
– Adium (Windows)
– Dropbox (Windows)
– Shim Cache (Windows)
– Skype (macOS/Windows)
– Windows Mail (Windows)
– Remote Desktop Protocol (Windows)
– Significant Locations (iOS)
– Signal (iOS)
– Messenger (iOS)
– Instagram (iOS)
– Tinder (iOS)
– Pinterest (iOS)
– VK (iOS/Android)
– Twitter (iOS)
– GroupMe (Android)
– Tumblr (Android)
– Google Maps (Android)
– Device Information (Android)
– Wallet Transactions (iOS)

Get Magnet AXIOM 3.10 Today!
If you’re already using AXIOM, download AXIOM 3.10 over at the Customer Portal. If you want to see how AXIOM 3.10 can help you find the evidence that matters, request a free trial today!

Leave a Comment

Latest Videos

Digital Forensics News Round-Up, June 19 2024 #dfir #digitalforensics

Forensic Focus 19th June 2024 2:46 pm

Digital Forensics News Round-Up, June 19 2024 #dfir #digitalforensics

Forensic Focus 19th June 2024 2:14 pm

Digital Forensics News Round-Up, June 12 2024 #dfir #digitalforensics

Forensic Focus 12th June 2024 5:51 pm

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feeds settings page to add an API key after following these instructions.

Latest Articles