±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35110
New Yesterday: 1 Visitors: 165

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Magnet AXIOM 1.2.3 Improves Smartphone Acquisition

Friday, January 19, 2018 (09:48:25)

Magnet AXIOM 1.2.3 Improves Smartphone Acquisition

The latest version of Magnet AXIOM is now available for all users! Magnet AXIOM 1.2.3 improves smartphone acquisition, provides innovative new time filtering capabilities, enhancements to AXIOM Examine and AXIOM Cloud, offers new artifacts, and adds language support for Chinese (traditional) and Korean.

Smartphone Acquisition Improvements

With this release, we’ve worked hard to improve the experience of mobile acquisition within AXIOM. Specifically, we’ve improved iOS quick imaging, implemented selective Android app downgrading, and improved device detection for Android devices. We also now support 1,200 Android recovery images (up from 650) which enables you to bypass device passwords and extract a full image.

AXIOM Examine Filter Updates

Relative Time Filtering – Now it’s easier to prove attribution by applying a relative time filter on a timestamp, related to a key artifact of interest, and see all the activity (e.g. shellbags, jump lists) that occurred just before and after the time stamp.

Accessible vs. Inaccessible File Filter – Allocated files/artifacts from allocated (accessible) space typically hold more investigative value in a case than files carved from unallocated space (inaccessible), so we’ve made it easier to separate the two types.

AXIOM Cloud Enhancements

AXIOM Cloud now highlights all extracted token (or iOS keychains) that can be used to authenticate and acquire data from cloud services — giving examiners the ability to extract cloud evidence without relying on user credentials

We’ve also brought in greater Office 365 functionality, with the ability to select specific files/folders to acquire from OneDrive and SharePoint instead of everything in the cloud — saving you time. You can also acquire Office 365 audit logs to view user actions, like what files were accessed and when.

New Artifacts in AXIOM 1.2.3

iOS 9, 10, 11 Keychains – Insert the iOS keychain into AXIOM Cloud and use it to authenticate to cloud accounts connected to the iOS device.

IP addresses and geo-location data from WhatsApp and Messenger audio/video calls (limited to computers as it is uncovered by reviewing browser artifacts left in the RAM.)

Get the Latest Version of Magnet AXIOM Today!

Customers can now get AXIOM 1.2.3 as an in-app update or in the Magnet Forensics Customer Portal. If you haven’t tried AXIOM yet, request a free 30-day trial here.



Log in to post a comment. The comments are owned by the poster. Forensic Focus is not responsible for their content.

1. [No Subject]

Hi Magnet,

Can you please elaborate what does it mean, "Hibernation and Sleep are now disabled when a search is running. " under AXIOM PROCESS FEATURES



2. Hibernation and Sleep details

Hi John,

What that means is we're not allowing the computer to automatically hibernate or sleep while a search is running. This is to prevent the unintentional hibernate/sleep from happening during a search.

Hope that helps.