AXIOM icon
Release Notes
Magnet AXIOM March 27, 2020

Artifact updates

Android-icon Device Information
Google Maps-icon Google Maps
Instagram-icon Instagram
Keystore-icon Keystore
LinkedIn-icon LinkedIn
Telegram-icon Telegram
TextNow-icon TextNow
Tinder-icon Tinder
VK-icon VK
Zalo-icon Zalo
Apple wallet 16-icon Apple Wallet
Facebook-icon Facebook
Facebook-Messenger-icon Facebook Messenger
Instagram-icon Instagram
Installed Applications Installed Applications
InteractionsC InteractionC NEW
IOS Notes iOS Notes
iOS Photos-icon iOS Photos Media Information NEW
Signal-icon Signal
iOS location services 16-icon Significant Locations
Threema-icon Threema NEW
VK-icon VK
Yahoo Webmail-icon Yahoo Webmail
Calendar-icon Calendar
Identifiers-icon Device Identifiers NEW
Google Search-icon Google Searches
Outlook-icon Outlook
Picture-icon Pictures
Amcache-icon Amcache
OS Info-icon OS Information
Windows Prefetch Files-icon Prefetch Files

Support for processing DAR images

In Magnet AXIOM 3.11.0 and higher, you can now process .dar images created using Cellebrite for full filesystem extractions of iOS devices (including from CAS and UFED 4PC).

  • UFD extractions for iOS contain four timestamps: changed, modified, accessed and created. The changed, modified, and accessed timestamps are stored inside the .dar image. However, the created timestamp is stored in a separate file, external to the .dar file, called system_metadata.plist. You can find the .plist file alongside the .dar file in the original extraction folder (where you’ll also find a .udf file).
  • For information about processing .dar images in Magnet AXIOM, log in to the Customer Portal to review Process a Cellebrite .dar image so Creation times are included in your evidence.

Device Identifiers artifact

You can now associate device information—such as IP addresses and MAC addresses—to a specific person with the Device Identifiers artifact.

  • The Identifiers refined result has been split into two distinct artifacts: Device identifiers and People Identifiers. Device identifiers include IP addresses, MAC addresses, and SIDs, while People Identifiers include names, usernames, phone numbers, and email addresses.
  • Use the Device Identifiers artifact to identify the unique devices, networks, IPs, or other Device Identifiers in a case.
  • Device Identifiers can help across multiple cases. For example, by tying a user to a specific location via Wi-Fi network or SID, or by tying a user to a particular device with a Camera Serial Number.
  • More details...




Bug fixes

Known issues