With the release of Internet Evidence Finder v6.5, Magnet Forensics adds support for Windows Phone, and introduces new triage features including live system artifact recovery capabilities.
IEF is already capable of recovering evidence from native and third-party mobile applications found on Android and iOS smartphones. With IEF v6.5, investigators can now analyze a physical image of a Windows Phone acquired using JTAG and chip-off techniques.
Now available as an optional module, Triage capabilities can be added-on to any license, giving an examiner the flexibility to bring their dongle into the field to conduct live system forensics. Capture live RAM, collect data from live system artifacts, and run an IEF search to recover hundreds of different types of digital forensics artifacts from Windows powered computers…