Mac Support in AXIOM Continues with More AirDrop Artifacts With the recent releases of both AXIOM 3.8 and 3.9, we’ve added additional Mac support to parse the unified log for entries surrounding the use of AirDrop. If you haven’t tried AXIOM yet, request a free 30-day trial here. In addition to performance and quality of life improvements, AXIOM 3.9 includes updated AirDrop artifacts, rebuilt desktops for Windows, and more. Magnet AXIOM 3.9 is now available! Update within AXIOM or download AXIOM 3.9 over at the Customer Portal today. While this is powerful when it comes to painting a clear picture of possible intent of a suspect, virtualizing an image often requires additional software and time. Many examiners, as part of their court preparation, will virtualize images in an effort to show non-technical stakeholders the look and feel of someone’s Windows environment. Rebuilt Desktop Rebuilt Desktops is a new artifact that allows users to view an approximation of what a given Windows user's desktop looks like, including wallpapers, monitor configurations, and icon positioning-without having to virtualize the image. Go in-depth on what you can get from the AirDrop in this how-to document. Whether your macOS/iOS case is based on intellectual property theft from an organization and identifying how that data was exfilled, or a criminal investigation tracking contraband on devices, AirDrop should be investigated as a potential source of how that data was moved. You can review these AirDrop artifacts on both computer and mobile evidence sources.
0 Comments
Leave a Reply. |