Tools

Autopsy is a Windows-based desktop digital forensics tool that is free, open source, and has all of the features that you’d normally find in commercial digital forensics tools. It is extensible and comes with features that include keyword search, hash matching, registry analysis, web analytics, and more. Basis Technology provides training, commercial support, and add-on modules.

Complete threat assessment done for you with speed, accuracy, and simplicity.

The MAGNET Chromebook Acquisition Assistant (MCAA) will help you acquire a logical image from a Chromebook when you have the username and password, and without requiring it to be in Developer Mode. Chromebook forensic images are acquired with a USB drive and the MCAA’s wizard style walkthrough will help you prepare the USB drive for image acquisition. The MCAA has been developed to automate much of the workflow first proposed in the Daniel Dickerman Chromebook Forensic Acquisition method.

MAGNET Encrypted Disk Detector (v3.0 released May 12th, 2020) is a command-line tool that can quickly and non-intrusively check for encrypted volumes on a computer system during incident response. The decision can then be made to investigate further and determine whether a live acquisition needs to be made in order to secure and preserve the evidence that would otherwise be lost if the plug was pulled .

MAGNET Web Page Saver (v3.3 released September 17th, 2020) is a perfect tool for capturing how web pages look at a specific point in time. This is especially useful in situations where the web pages need to be displayed in an environment where Internet access is not available (such as a court room).

MAGNET RAM Capture is a free imaging tool designed to capture the physical memory of a suspect’s computer, allowing investigators to recover and analyze valuable artifacts that are often only found in memory.

MAGNET Process Capture is a free tool that allows you to capture memory from individual running processes. Whether you’re short on time or are only interested in specific processes, MAGNET Process Capture can retrieve these specific processes and also provide less fragmented data and better recovery of larger data types.

MAGNET App Simulator lets you load application data from Android devices in your case into a virtual environment, enabling you to view and interact with the data as the user would have seen it on their own device. Use this tool to get a feel of how a suspect was interacting with their data, or to present the evidence to juries and stakeholders in a familiar mobile appearance.

Magnet ACQUIRE lets digital forensic examiners quickly and easily acquire forensic images of any iOS or Android device, hard drive, and removable media — and is available at no cost to the forensic community.

The MAGNET Custom Artifact Generator (MCAG) tool makes it easy to create custom artifacts for use within Magnet AXIOM from CSV (and other delimited files) and SQLite databases. This means you can now build your own custom artifacts to bring data into AXIOM from other sources without needing to know XML/Python or Magnet’s API for custom artifacts.

Maintain privacy and build trust with the public while capturing crucial but fleeting digital evidence from consenting victims and witnesses.

Whether you’re triaging computers and external hard drives in the field or working through a backlog of evidence back in the lab, examiners need to find the information that is key for their case work as quickly as possible.

 Magnet IGNITE is a Cloud-Based Early Case Assessment Triage Tool

Accelerate digital evidence review by enabling secure agency-wide collaboration from anywhere, anytime.
 

Growing digital data volumes across multiple sources in your agency complicate your ability to securely store, track, and manage your cases while also hindering collaboration. You need a modern approach to empower your entire agency to collaborate on, analyze, and manage all aspects of your digital investigations, while upholding the chain of custody.

The Magnet Digital Investigation Suite helps you increase efficiency and collaborate agency-wide, while operating securely & transparently to reduce risk.

Increasing data volumes, evidence complexity, resource constraints and the fast-changing technology landscape is forcing you to get more done with what you have and oftentimes results in significant delays to evidence, increasing risk to the public and agency. With Magnet AUTOMATE, enable an enhanced approach to digital investigations that scales up your existing resources and processes to complete investigations quickly.

Recover digital evidence from the most sources and use powerful and intuitive Analytics tools to easily analyze data in one case file.

AXIOM Cyber is a robust digital forensics and incident response solution for businesses that need to perform remote acquisitions and collect & analyze evidence from computers, the cloud, and mobile devices.