New in Magnet AXIOM 2.2.2.10372 - July 06, 2018
Mobile and desktop artifacts
- Skype: Added parsing and carving support for private messages, group messages, attachments, calls, media cache, and highlights. [Skype 8.1-8.15 on Android]
- Owner Information: Added support for recovering the Apple ID associated with an iOS device, the name associated with an iOS device, and more. [Owner Information on iOS]
- iOS Contacts: Added support for favorite contacts. [iOS 10.2.1-12]
- iOS Device Information: Added support for recovering the model ID, the build version, encryption status, and more. [iOS]
AXIOM Examine features
- You can now filter on artifact columns for source and location attributes.
- To improve the speed of building connections, and exporting, temporary data is now saved to local storage when opening a case over the network.
Fixed issues
- On some computers, Magnet AXIOM would crash during startup or when starting a scan. -AXP-3623
- Sometimes when you attempted to recover an image of a Samsung device, the device wouldn't go in to recovery mode. -MMI-895
- If you attempted to bypass password locks on LG devices and the device had a new version of LG Advanced Flash (LAF), an error message appeared. -MMI-881
Known issues
- In some situations, antivirus software is known to prevent Magnet AXIOM from creating a portable case. For example, if Malware URLs are part of the evidence being exported, the portable case might not get created successfully. Workaround: Turn off the antivirus software and create the portable case. Turn on the antivirus software again.
- Magnet AXIOM crashes when out of disk space. Workaround: Check the amount of disk space available for the case and acquisition directories before you start processing.
- When you process an encrypted iTunes backup and provide the password to decrypt it, the data might still appear in its encrypted form in AXIOM Examine. Workaround: Extract the iOS image from the compressed container to a different location on your computer. In AXIOM Process, perform a Files and Folders scan. (In the Evidence sources section, click Mobile > iOS > Load evidence > Files and Folders.)
- In older versions of AXIOM Examine (earlier than 1.1.0), if you attempt to open a case that was processed using AXIOM Process version 1.1.0 or later, you may experience unexpected results.
View the Release Notes for previous versions