Firstly, there are two products with AXIOM by name in Magnet Forensics, magnet AXIOM which is built for law enforcement and then Magnet AXIOM cyber, which is designed for enterprise or business solutions. So, what is magnet AXIOM cyber ?
Magnet AXIOM Cyber is a modern, digital forensics solution that functions to acquire evidence from endpoints for cases of investigations in enterprise such as employee misconduct data ex-filtration and root cause analysis.
In general, Magnet AXIOM cyber actually comprises of all features in Magnet AXIOM but added with features that enables it to remotely collect evidence from target endpoints (both Mac and Windows).
Magnet AXIOM Cyber allows users to:
1. Off-Network Collection
Magnet AXIOM Cyber enables users to easily perform remote collections of Mac and Windows endpoints even when they are disconnected to the corporate network. The remote collections of data can be done covertly and then the collected data is written to a scalable open logical container) called AFF4-L forensically sound container.
2. Advanced Cloud Support
Magnet AXIOM cyber allows users to gather data from corporate cloud services like AWS S3, EC2, Azure virtual machines, MS Teams, and Slack which are crucial in helping with Insider Threat and HR Investigations
Users may also use Admin credentials to easily acquire from Office 365, G Suite, and Box to speed up investigations.
3. Case intelligence
Magnet AXIOM cyber is equipped with powerful analytics features like timeline, connections and magnet.AI. The analytics tool are embedded right from the very first update. (so users does not need to purchase or install an extra module or add-on product.)
Timeline feature in magnet AXIOM cyber helps users to quickly and easily track down malware using relative time filters that are applied
to all timestamped evidence items including data from the file system, memory or even other sources like the cloud or mobile devices.
Connections helps users to quickly find and visualize data across every evidence sources. For example, users can identify how a specific picture file got on a device, how it was accessed and information on file sharing (whether it is shared and the person involved).
Magnet.AI is able to detect conversation and images related to harassment. It also helps in reducing noise or junk with picture classifier by finding system icons and graphics within datasets.
Magnet AXIOM cyber uses technology like machine learning or CBIR (content-Based image retrieval) and data visualisation.
4. Support eDiscovery
Corporates forensics examiner also need to perform collections that support eDiscovery.
Magnet AXIOM cyber allows examiners to generate a load file that can be imported into eDiscovery platform.
With this feature, the generated load file can be shared with eDiscovery team for use in their tool.
Load files generated by Magnet AXIOM cyber include:
5. Linux Support
Magnet AXIOM Cyber is able to acquire data from Linux systems. This feature allows users to obtain the most complete picture possible analysis of data with evidence from other data sources.
6. Leverage the Benefits of Cloud Computing
The benefits of hosting applications in the cloud include cost savings and more centralized operations. Deploying AXIOM Cyber in cloud such as Azure or AWS helps leverage the benefits of cloud computing as well as the ability to perform off-network remote collections of Mac and Windows computers.
Magnet AXIOM Cyber helps businesses in carrying out numbers of investigations such as:
