We are happy to announce the release of Magnet AXIOM Cyber 7.8. This release introduces several new enhancements to streamline your workflow and uncover insights faster, including:
Higher Resolution Timestamps With Millisecond Precision
New Markup Viewer for Email Explorer
Teams Client Credential Authentication
You can upgrade to the latest version within AXIOM Cyber or over at the Magnet Forensics Customer Portal. Or, if you haven’t tried AXIOM Cyber yet, request a free trial here.
Higher Resolution Timestamps With Millisecond Precision
In any investigation, digital forensic examiners must address critical questions, including the pivotal “when” and “how.” Precise timestamps are vital in answering these questions, whether by constructing timelines, correlating events, or connecting relationships between various actions and users.
But a lot can happen in just one second when some events occur at machine speed!
Now, millisecond-precise timestamps are supported throughout Magnet AXIOM and Magnet AXIOM Cyber as well as all artifacts where millisecond data is available, such as in Timeline, Connections, and log entries. Ultimately, this enables you to quickly analyze chronologically sorted artifacts with improved accuracy.
Check out the blog post “Improve Investigation Accuracy With Higher Timestamp Resolution” to learn more about this enhancement.
New Markup Viewer in Email Explorer
In the 2023 State of Enterprise DFIR Report, business email compromise was identified as one of the top three ways organizations became victims of a data breach. This happens when an attacker pretends to be a trusted contact or entity to trick recipients into clicking malicious links in an email to expose sensitive information (such as login credentials) or install malware.
With the new Markup Viewer in Email Explorer, you can easily view an email's header and HTML or XML source code to quickly uncover malicious URLs due to a phishing or business email compromise attack. The Markup Viewer preview card is supported for all email artefacts that have an HTML or XML source.
Teams Client Credentials Authentication
Magnet Forensics is building its cloud acquisition capabilities with an enhancement to Teams collection workflow! Now, you can authenticate and access data with client credentials from Teams and Microsoft 365. If your organization’s data access control policy prohibits using an account’s username and password to authenticate and access data, upgrade now and use client credentials instead to meet your organization’s security, privacy, and compliance policies while collecting the comprehensive cloud data you need for your investigations.
Overall, the ease of use and speed of the workflow were improved. Now, you can acquire multiple accounts at once (as opposed to creating separate cases for each collection), resulting in significant time savings as the number of users or custodians involved in your investigation increases. Additionally, you can expect faster download speeds (less throttling) with this authentication method, and we’ve improved the UX.
Client credentials are configured in Azure and can be set up with read-only access with the option to choose what data can be accessed. You can also set client credentials to expire if governance rules require time-limited access to data. Learn how to set up client credentials in Azure in the Magnet Forensics knowledge base article “Sign in to Microsoft using Client Credentials” (Support Portal login required.)
New Artifacts
Discord Channels and Servers (Android)
DJI Flight Logs (iOS & Android)
Spotlight Searches (iOS)
Updated Artifacts
iMessage/SMS/MMS (iOS)
Telegram Messages and Users (iOS)
Get Magnet AXIOM Cyber 7.8 Today!
If you already use AXIOM Cyber, download 7.7 at the Magnet Forensics Customer Portal. To try AXIOM Cyber for yourself, request a free trial today!