Magnet Forensics releases a new version of AXIOM. Version  5.7.0.27176 , released on 2021-11-15 provides many new features and updates.

Artifacts

  • BEAM Wallet | iOS and Android: Added support for recovering information about transactions and addresses from BEAM Wallet.
  • Coinbase | iOS and Android: Added support for recovering transactions, addresses, and purchases made using Coinbase.
  • Exodus | iOS and Android: Added support for recovering information about transactions made using Exodus.
  • Facebook Messenger | iOS: Updated support to improve carving on Users Contacted fragment. [334.2]
  • Facebook Messenger | iOS: Updated support to recover artifact hits that were previously being dropped. [334.2]
  • Grindr | Android: Updated support for the latest version of Grindr Messages. [7.18]
  • PowerLog Application State | iOS and macOS: Added support for parsing information about application states from the PowerLog.
  • PowerLog Battery Shutdown | iOS: Added support for recovering information about the device when the battery died.
  • ProtonMail Emails | Android: Added support for ProtonMail Emails and ProtonMail Contacts.
  • Rebuilt Desktops | Windows: Updated support to add a standardized date in the taskbar date/time fragment.
  • SMS/MMS | Android: Added support to parse SMS/MMS messages from the Message table in the mmssms.db.
  • Signal and Wickr | iOS and Android: Updated support to improve SQLite WAL Files decryption algorithm.
  • Signal | Android: Messages that are sent as group updates can now be decoded.
  • Signal | iOS: Updated support to recover missing hits for corrupted WAL File. [5.21.1, 5.23.1+]
  • Snapchat | iOS: Updated support to retrieve missing hits from multiple artifacts.
  • Telegram | macOS: Added support for parsing the database through manual decryption with an option to enter the password in the options dialog if one was used to encrypt the local database.
  • Trash Items | Apple: Updated support for macOS Trash Items to fix the Added Date/Time fragment.
  • WeChat | Android: Updated support by providing WeChat password in the logs.
  • WhatsApp | iOS: Added support for Accounts Information artifact.
  • Updated support to enable performance improvements for scanning PST files.

Remote acquisition

  • When configuring an agent, you can now choose to manually set a proxy server by providing the proxy server IP address and the proxy server port. Manually configure proxy settings if you want to configure a Windows agent to survive the shutdown of an endpoint as agents cannot auto-detect proxy settings when running as a Windows service.

Processing

  • You can now parse LVM2 logical volumes that contain XFS file system partitions. Now, when a logical volume is identified LVM is displayed before the volume group.

Examining

  • When you create a CSV, HTML, Excel, Load File, PDF, or XML report, there is now a column that displays the Item ID for each artifact.
  • When you upload evidence from Magnet AXIOM to Magnet REVIEW, you can view details about the upload progress and the log files.
  • When you view evidence in the Artifacts explorer, there is now a column that displays the Item ID for each artifact.
  • You can now integrate Magnet REVIEW to upload evidence directly from Magnet AXIOM to your organization’s Magnet REVIEW server.
  • You can now upload evidence directly from the AXIOM Examine exporting wizard to your Magnet REVIEW cases.