Magnet AXIOM 3.5 Includes Apple Warrant Returns And User Experience Improvements

Magnet AXIOM 3.5 is now available for customers—either within AXIOM or as a download over at the Magnet Forensics Customer Portal. In this release, we’ve added Apple warrant returns, new image categories in Magnet.AI, as well as some quality of life improvements to make AXIOM even faster and easier to use.

If you haven’t tried AXIOM yet, request a free 30-day trial here.NEW APPLE WARRANT RETURNS

AXIOM Cloud can now ingest and analyze warrant returns from Apple that will often include useful information even if the physical device is not recovered.


AXIOM now provides full decryption of any iOS device backups that are included within warrant return package as well as processing synced media, and iCloud drive contents.




NEW IMAGE CATEGORIES FOR MAGNET.AI

Magnet.AI, a feature built into AXIOM at no additional charge, significantly speeds up your investigations by using artificial intelligence to identify pictures of interest as well as luring or grooming chats. With 3.5 AXIOM can now recognize hate symbols, license plates on vehicles, and pictures that have faces in them.


QUALITY OF LIFE IMPROVEMENTS

At Magnet we’re constantly striving to make AXIOM more powerful and easier to use. In 3.5 we’ve introduced a frequently customer-requested feature that we hope will make examinations easier and faster.


The Advanced Search functionality will now easily allow you to create granular searches using Boolean operators like AND & OR, Match Case, Whole Word Only, and with the ability to stack these searches so you can find exactly what it is that you’re looking for quickly.


Over the next several releases of AXIOM we’re going to be focusing more on quality of life or user experience improvements. Check out this Q&A blog with AXIOM UX Designer, Filip Jadczak, to learn more about the new features in AXIOM 3.5 and what we have in store for the future.


NEW ARTIFACTS

– Evernote (Android)

– Application Power Usage (Android)

– Camera History (Android)

– Activity Manager History (Android)

– Last Known Locations (Android)

– Powerlog Process Data Usage (macOS or iOS)

– WhatsApp (Windows desktop)


UPDATED ARTIFACTS

– Snapchat (iOS and Android)

– Telegram (iOS)

– WhatsApp (iOS and Android)

– Enhance EXIF from Pictures

– Installed Applications (Android)

– Device Information (iOS and Android)


GET MAGNET AXIOM 3.5 TODAY!

If you’re already using AXIOM, download AXIOM 3.5 over at the Customer Portal. If you want to see how AXIOM 3.5 can help you find the evidence that matters, request a free 30-day trial today!

Leave a Comment

Latest Videos

Quantifying Data Volatility for IoT Forensics With Examples From Contiki OS

Forensic Focus 22nd June 2022 5:00 am

File timestamps are used by forensics practitioners as a fundamental artifact. For example, the creation of user files can show traces of user activity, while system files, like configuration and log files, typically reveal when a program was run. 

Despite timestamps being ubiquitous, the understanding of their exact meaning is mostly overlooked in favor of fully-automated, correlation-based approaches. Existing work for practitioners aims at understanding Windows and is not directly applicable to Unix-like systems. 

In this paper, we review how each layer of the software stack (kernel, file system, libraries, application) influences MACB timestamps on Unix systems such as Linux, OpenBSD, FreeBSD and macOS.

We examine how POSIX specifies the timestamp behavior and propose a framework for automatically profiling OS kernels, user mode libraries and applications, including compliance checks against POSIX.

Our implementation covers four different operating systems, the GIO and Qt library, as well as several user mode applications and is released as open-source.

Based on 187 compliance tests and automated profiling covering common file operations, we found multiple unexpected and non-compliant behaviors, both on common operations and in edge cases.

Furthermore, we provide tables summarizing timestamp behavior aimed to be used by practitioners as a quick-reference.

Learn more: https://dfrws.org/presentation/a-systematic-approach-to-understanding-macb-timestamps-on-unixlike-systems/

File timestamps are used by forensics practitioners as a fundamental artifact. For example, the creation of user files can show traces of user activity, while system files, like configuration and log files, typically reveal when a program was run.

Despite timestamps being ubiquitous, the understanding of their exact meaning is mostly overlooked in favor of fully-automated, correlation-based approaches. Existing work for practitioners aims at understanding Windows and is not directly applicable to Unix-like systems.

In this paper, we review how each layer of the software stack (kernel, file system, libraries, application) influences MACB timestamps on Unix systems such as Linux, OpenBSD, FreeBSD and macOS.

We examine how POSIX specifies the timestamp behavior and propose a framework for automatically profiling OS kernels, user mode libraries and applications, including compliance checks against POSIX.

Our implementation covers four different operating systems, the GIO and Qt library, as well as several user mode applications and is released as open-source.

Based on 187 compliance tests and automated profiling covering common file operations, we found multiple unexpected and non-compliant behaviors, both on common operations and in edge cases.

Furthermore, we provide tables summarizing timestamp behavior aimed to be used by practitioners as a quick-reference.

Learn more: https://dfrws.org/presentation/a-systematic-approach-to-understanding-macb-timestamps-on-unixlike-systems/

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_i0zd7HtluzY

A Systematic Approach to Understanding MACB Timestamps on Unixlike Systems

Forensic Focus 21st June 2022 5:00 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...