Strengthen Your Cases with Webpage Data in Magnet AXIOM 4.4

Magnet AXIOM 4.4 and Magnet AXIOM Cyber 4.4 are now available with built-in artifact support for results captured with the free MAGNET Web Page Saver tool, the ability to choose the evidence summaries included in your exports, and several new and updated artifacts — including Aloha Browser, Evidence of Timestomping, and iOS Screen Layout.

If you haven’t tried AXIOM or AXIOM Cyber yet, request a trial here.

New in AXIOM & AXIOM Cyber: Web Page Saver Artifact Support

Webpage captures can be another valuable source of evidence and context in your investigations. AXIOM 4.4 includes built-in artifact support for analyzing webpage snapshots captured with the free MAGNET Web Page Saver tool, providing you with a fast and easy way to add webpage data to your case!


Get The Latest DFIR News

Join the Forensic Focus newsletter for the best DFIR articles in your inbox every month.


Unsubscribe any time. We respect your privacy - read our privacy policy.

You can now export URLs of interest in your case from AXIOM into MAGNET Web Page Saver, capture the webpage data, and add your results back into your AXIOM case file for analysis alongside your other evidence.

For more information on how you can use MAGNET Web Page Saver with AXIOM, check out this blog series from Jessica Hyde and how-to video from Tarah Melton:

Jessica has also provided a handy guide to creating your own export templates with Magnet AXIOM here.

Don’t have the MAGNET Web Page Saver yet? Download it for free!

New in AXIOM & AXIOM Cyber: Choose the Evidence Summaries Included in Your Exports

Depending on the case and stakeholder needs, you may or may not wish to include all the available evidence summaries in your reports.

With AXIOM 4.4., you can now choose which evidence summaries to include in your HTML and PDF reports, allowing you to better tailor your reporting for your stakeholders’ needs. Even better, you can also save your summary preferences as part of any export template for even more efficient workflows!

For more on this feature—and other new export customization features we’ve recently added to AXIOM—check out this blog: Customize your Exports with Magnet AXIOM.

New Evidence of Timestomping Artifact

Malware is meant to blend in and go unnoticed so that it can maintain its presence on a device. One way that bad actors try to keep their malware hidden is to manipulate the timestamps of their malicious files, a tactic known as timestomping.

With AXIOM 4.4, we’ve introduced a new Evidence of Timestomping artifact to help you detect potential timestomping. Check out this blog and how-to video from Tarah Melton for more details:

New iOS Screen Layout Artifact

Details on how a user has set up their device application icons can provide insights into how a user interacted with their device, giving you additional context for your investigation.

With our new iOS Screen Layout artifact in AXIOM 4.4, examiners now can quickly identify and report on how applications were arranged on a device.

Check out this blog from Trey Amick for more on working with the new iOS Screen Layout artifact: Recover iOS App Screen Layouts with the New iOS Home Screen Items Artifact.

New Artifacts

  • Aloha Browser (iOS)
  • Evidence of Timestomping (Windows)
  • iOS Screen Layout (iOS)
  • Magnet Web Page Saver (Windows)

Artifact Updates

  • Contacts (iOS)
  • Google Duo (Android, iOS)
  • Google Meet (iOS)
  • IOS Messages (iOS)
  • KakaoTalk (Android)
  • Safari (iOS)
  • Secret Photo Vault (iOS)
  • Signal (iOS)
  • Text Plus (Android)
  • $LogFile Analysis (Windows)

Get Magnet AXIOM 4.4 and Magnet AXIOM Cyber 4.4 Today!

If you’re already using AXIOM, download AXIOM 4.4 or AXIOM Cyber 4.4 over at the Magnet Forensics Customer Portal. If you want to try AXIOM AXIOM Cyber for yourself, request a trial today.

Leave a Comment

Latest Videos

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

Throughout the past few years, the way employees communicate with each other has changed forever.

69% of employees note that the number of business applications they use at work has increased during the pandemic.

Desk phones, LAN lines and even VOIP have become technologies of the past workplace environment as employees turn to cloud applications on their computers and phones to collaborate with each other in today’s workplace environment.

Whether it’s conversations in Teams, file uploads in Slack chats, or confidential documents stored in Office 365, the amount of data stored and where it is stored, is growing quicker than IT and systems administrators can keep up with.

Corporate investigators and eDiscovery professionals need to seamlessly collect relevant data from cloud sources and accelerate the time to investigative and discovery review.

With the latest in Cellebrite’s remote collection suite of capabilities, investigators and legal professionals can benefit from secure collection with targeted capabilities for the most used workplace applications.

Join Monica Harris, Product Business Manager, as she showcases how investigators can:

- Manage multiple cloud collections through a web interface
- Cull data prior to collection to save time and money by gaining these valuable insights of the data available
- Collect data from the fastest growing cloud collaboration applications like Office365, Google Workspace, Slack and Box
- Login to a single source for workplace app collection without logging into every app and pulling data from multiple sources for every employee
- Utilize a single unified collection workflow for computer, mobile and workplace cloud applications without the need to purchase multiple tools for different types of collections – a solution unique to Cellebrite’s enterprise solution capabilities

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_g6nTjfEMnsA

Tips And Tricks Data Collection For Cloud Workplace Applications

Forensic Focus 4 hours ago

In this episode of the Forensic Focus podcast, Si and Desi explore the cutting-edge technology of deepfake videos and image manipulation. In addition to discussing the latest technological developments and efforts being made to detect manipulated media, they also examine the associated legal and ethical implications.

Show notes:

Boris Johnson image - https://www.theguardian.com/politics/2023/jan/10/spot-the-difference-boris-johnson-appears-scrubbed-from-photo-posted-by-grant-shapps

Deep Fake Neighbour Wars - https://m.imdb.com/title/tt21371376/

Stalin image - https://www.history.com/news/josef-stalin-great-purge-photo-retouching

Nvidia eye contact AI - https://www.polygon.com/23571376/nvidia-broadcast-eye-contact-ai and https://www.youtube.com/watch?v=xl87WTDrReo

Birthday problem - https://en.wikipedia.org/wiki/Birthday_problem

Same frightening woman in AI images - https://petapixel.com/2022/09/09/the-same-frightening-woman-keeps-appearing-in-ai-generated-images/

Inherent mysogeny of AI portraits - https://www.theguardian.com/us-news/2022/dec/09/lensa-ai-portraits-misogyny

Midjourney - https://www.midjourney.org/

Deepfake porn legality - https://www.theverge.com/2022/11/25/23477548/uk-deepfake-porn-illegal-offence-online-safety-bill-proposal and https://www.technologyreview.com/2021/02/12/1018222/deepfake-revenge-porn-coming-ban/

AIATSIS - https://aiatsis.gov.au/cultural-sensitivity

Fake tiger porn story - https://www.dailydot.com/unclick/tiger-porn-britain-law/

Group photo with no blinking - https://www.countrylife.co.uk/comment-opinion/curious-questions-group-photo-179102

Emma Watson deefake audio - https://www.thetimes.co.uk/article/ai-4chan-emma-watson-mein-kampf-elevenlabs-9wghsmt9c

Domestika - https://www.domestika.org/en/courses/981-introduction-to-interviewing-the-art-of-conversation

Investigative Interviewing - https://www.amazon.co.uk/dp/0199681899?ref=ppx_pop_mob_ap_share

Forensic Focus events calendar - https://www.forensicfocus.com/events/

Si Twitter - https://twitter.com/si_biles

In this episode of the Forensic Focus podcast, Si and Desi explore the cutting-edge technology of deepfake videos and image manipulation. In addition to discussing the latest technological developments and efforts being made to detect manipulated media, they also examine the associated legal and ethical implications.

Show notes:

Boris Johnson image - https://www.theguardian.com/politics/2023/jan/10/spot-the-difference-boris-johnson-appears-scrubbed-from-photo-posted-by-grant-shapps

Deep Fake Neighbour Wars - https://m.imdb.com/title/tt21371376/

Stalin image - https://www.history.com/news/josef-stalin-great-purge-photo-retouching

Nvidia eye contact AI - https://www.polygon.com/23571376/nvidia-broadcast-eye-contact-ai and https://www.youtube.com/watch?v=xl87WTDrReo

Birthday problem - https://en.wikipedia.org/wiki/Birthday_problem

Same frightening woman in AI images - https://petapixel.com/2022/09/09/the-same-frightening-woman-keeps-appearing-in-ai-generated-images/

Inherent mysogeny of AI portraits - https://www.theguardian.com/us-news/2022/dec/09/lensa-ai-portraits-misogyny

Midjourney - https://www.midjourney.org/

Deepfake porn legality - https://www.theverge.com/2022/11/25/23477548/uk-deepfake-porn-illegal-offence-online-safety-bill-proposal and https://www.technologyreview.com/2021/02/12/1018222/deepfake-revenge-porn-coming-ban/

AIATSIS - https://aiatsis.gov.au/cultural-sensitivity

Fake tiger porn story - https://www.dailydot.com/unclick/tiger-porn-britain-law/

Group photo with no blinking - https://www.countrylife.co.uk/comment-opinion/curious-questions-group-photo-179102

Emma Watson deefake audio - https://www.thetimes.co.uk/article/ai-4chan-emma-watson-mein-kampf-elevenlabs-9wghsmt9c

Domestika - https://www.domestika.org/en/courses/981-introduction-to-interviewing-the-art-of-conversation

Investigative Interviewing - https://www.amazon.co.uk/dp/0199681899?ref=ppx_pop_mob_ap_share

Forensic Focus events calendar - https://www.forensicfocus.com/events/

Si Twitter - https://twitter.com/si_biles

YouTube Video UCQajlJPesqmyWJDN52AZI4Q_i41eg24YGZg

Deepfake Videos And Altered Images - A Challenge For Digital Forensics?

Forensic Focus 13th February 2023 10:30 am

This error message is only visible to WordPress admins

Important: No API Key Entered.

Many features are not available without adding an API Key. Please go to the YouTube Feed settings page to add an API key after following these instructions.

Latest Articles

Share to...