New in Magnet AXIOM 2.0.2 - May 14, 2018
Mobile and desktop artifacts
- iMesages/SMS/MMS: Updated carving support. [iOS 11.4]
- WhatsApp Groups:Artifact now lists the administrator of the group conversation. [iOS]
- Snapchat Snaps: Ability to recover "Received Snaps" and "For My Eyes Only" artifacts on Android 6.0. [Snapchat 10.12.5.0 on Android]
Cloud artifacts
- You can now process Google Chrome information from the Google Takeout artifact., such as Browser History, Extension Settings, and more.
- You can now process Box.com enterprise events.
- You can now process Google Task information from the Google Takeout artifact.
- You can now process Google Keep information from the Google Takeout artifact.
- You can now process Box.com user events.
AXIOM Process features
- Now supports backing up encrypted partitions on encrypted Android devices.
- Now supports backing up Android devices with a UTF-8 password.
AXIOM Examine features
- In AXIOM Examine, you can now specify which encoding you want to use for artifacts on a per-attribute basis. You can choose to encode a single item, a collection of items, or a whole artifact.
Fixed issues
- When AXIOM Process finishes scanning your final evidence source, the final source displays "Done." AXIOM Process will begin indexing your evidence. -AXP-2116
- AXIOM Examine failed to display previews of Chinese, Korean, Japanese, and Vietnamese characters correctly in .pst file emails. -AXE-5476
- AXIOM Examine crashed when selecting two or more check boxes in the Content types filter. -AXE-5296
- Sometimes AXIOM Cloud did not recover all Instagram account posts. -CAO-1326
- When acquiring an encrypted Samsung device, the minor Android version was validated incorrectly. -MMI-462
- When an error message displayed, the "Submit a support ticket" link was broken. -MMI-412
- In the iOS device troubleshooting wizard, restarting the Apple Mobile Device Service (AMDS) caused the program to stop responding because of an error with the Magnet.ServiceController. -MMI-559
- MMI-531
- In some situations, the Image Info.txt file incorrectly showed the Backup Encrypted state as False when the backup was actually encrypted. -MMI-530
- If a corrupt $LogFile was encountered during a scan, AXIOM would hang on that process and eventually crash. -JET-2231
- In some situations, when searching for deleted SQLite records, AXIOM Process would search for more data than necessary and eventually timeout. -ARTC-463
Known issues
- In some situations, antivirus software is known to prevent Magnet AXIOM from creating a portable case. For example, if Malware URLs are part of the evidence being exported, the portable case might not get created successfully. Workaround: Turn off the antivirus software and create the portable case. Turn on the antivirus software again.
- Magnet AXIOM crashes when out of disk space. Workaround: Check the amount of disk space available for the case and acquisition directories before you start processing.
- When you process an encrypted iTunes backup and provide the password to decrypt it, the data might still appear in its encrypted form in AXIOM Examine. Workaround: Extract the iOS image from the compressed container to a different location on your computer. In AXIOM Process, perform a Files and Folders scan. (In the Evidence sources section, click Mobile > iOS > Load evidence > Files and Folders.)
- In older versions of AXIOM Examine (earlier than 1.1.0), if you attempt to open a case that was processed using AXIOM Process version 1.1.0 or later, you may experience unexpected results.
View the Release Notes for previous versions