Supplementary - Hiding in Cloud, you can run but not hide
Magnet AUTOMATE with brilliant features
Have you heard of Magnet AUTOMATE yet? This blog may repeat some of the featured services. However, Magnet AUTOMATE is loaded with new features to cut waiting times on acquiring media, but also with automatic processing of images to make the forensic examiner’s workload much easier.
Gone are the days of linear acquisitions. Multiple nodes can be deployed to acquire and process media in parallel. And all are automated thanks to workflows which must be configured beforehand. Once configured, the workflows will automatically acquire and process the media.
Magnet AUTOMATE is a platform that an organisation can use to create a distributed workflow for digital forensic applications. Magnet AUTOMATE can help make evidence discovery more efficient by automating the steps between tasks, such as acquiring forensic images, searching the evidence source with AXIOM Process, and post-processing steps such as creating reports. You can integrate just about any application into your workflow provided that it has a command-line interface (CLI) or application programing interface (API).
AUTOMATE Essentials is a streamlined offering of Magnet AUTOMATE, which installs one controller and one node on a computer. It also includes several default workflows and configures default Magnet Forensics applications so that you can start creating cases right away.
AUTOMATE Advanced provides the workflow building and automation functionality from Magnet AUTOMATE, while being tailored towards enterprise usage with its ability to acquire evidence from remote computers and the Microsoft cloud platform.
AUTOMATE also fully integrates with many third-party forensic tools which have command-line interfaces (CLI’s). Another feature is the “Watch Folder” which is being used to start processing automatically once it senses that an image was uploaded.
Another feature is the importing of XML for those third-party tools who might not have a CLI but with an export function to XML.
With AUTOMATE Advanced, acquisitions can be made remotely on the same network from a server, computer or laptop. Even volatile acquisitions like RAM can be made.
The Dashboard displays the status of all a processed, active or completed.
As in the previous blog, Cloud acquisitions can be made from a host of social media applications, bearing in mind that Warrant Returns will be required for some of the applications to request evidence. What is a Warrant Return? A warrant return is essentially a report submitted by law enforcement officers to the court that issues the warrant. It serves as an official record of the execution of the warrant, documenting the actions taken, evidence needed to be collected, and any arrests which will be made.
Magnet AXIOM can acquire data from the following platforms and services:
* Amazon Web Services
* Azure
* Apple
* Box. com
* Dropbox
* IMAP/POP
* Lyft
* Mega
* Microsoft
* Microsoft 365
* Slack
* Uber
Magnet AUTOMATE allows investigations to be completed in shorter timeframes by automatically acquiring and processing media, allowing investigators to use the information more timeously.
Risk Diversion Blog
