On an average user’s computer, there are dozens of areas an investigator can look for activity. Web browsers, cloud storage, email, external USB drives, and the applications a person uses, will all leave a trail that digital forensic investigators will follow to determine what has occurred on a server, workstation, or mobile device. However, manually examining each of these evidence areas can be time consuming and difficult. In an investigation, time is of the essence in and you can’t be slowed down digging for a needle in a haystack.
Join Kraft Kennedy Information Security and Governance experts Justin Logue and Leeann Nicolo, in collaboration with forensics investigator Jamie McQuaid, as they review a modern examination of a Windows computer using Magnet AXIOM, a complete digital investigations platform. AXIOM is a platform that automates and simplifies some of the complex and mundane tasks of a digital forensic examination, while also freeing up time for deeper analysis by examiners and investigators. We will step through how we use the AXIOM platform to quickly parse, analyze, and timeline key artifacts in a typical forensic examination.