Magnet Axiom 10.2.0.49217

David Thorne

New Artefacts

  • Apple Intelligence Photo Search | iOS: Added support for Apple Intelligence Photo Search.
  • ChatGPT Group Conversation Members | iOS: Added support for ChatGPT Group Conversation Members.
  • ChatGPT Group Conversations | Android: Added support for ChatGPT Group Conversations and ChatGPT Group Conversation Members.
  • Cloud Google (Warrant Return)| Cloud: Added support for Cloud Google Chrome Autofill (Warrant Return) and Cloud Google Contact Info Artifacts (Warrant Return)
  • Cloud Google Chrome Bookmarks (Warrant Return) | Cloud: Added support for Cloud Google Chrome Bookmarks (Warrant Return).
  • Cloud Google Contacts (Warrant Return) | Cloud: Added support for Cloud Google Contacts (Warrant Return).
  • Cloud Google Gemini Notebooks | Cloud: Added support for Cloud Google Gemini Notebooks.
  • Cloud Google Mail Message Information (Warrant Return) | Cloud: Added support for Cloud Google Mail Message Information (Warrant Return).
  • Cloud Google Maps Labeled Places (Warrant Return) | Cloud: Added support for Cloud Google Maps Labeled Places (Warrant Return).
  • Google Account Change History (Warrant Return) | Cloud: Added support for Google Account Change History (Warrant Return).
  • Vehicle Event Logs | Vehicle: Added support for Vehicle Event Logs.
  • X (Twitter) Grok User Accounts | iOS: Added support for X (Twitter) Grok User Accounts.

Updated Artefacts

  • Android Messages | Android: Updated parsing methods for identifying participants and recipients.
  • ChatGPT Chats| Android, iOS : Updated to rename ChatGPT Chats to ChatGPT Conversations for iOS and Android platforms.
  • ChatGPT Group Members | Android: Updated aggregation of artifacts to match iOS processing.
  • ChatGPT Messages | Android: Updated to filter out system messages.
  • ChatGPT Messages | Android: Updated to include support for hidden chat threads.
  • ChatGPT Messages | Android: Updated to prevent duplicate streamed messages.
  • ChatGPT Messages | iOS, Android : Updated to recover group chat messages.
  • Cloud Copilot Messages: Cloud: Updated to include the fragment, "Additional Data" to capture human-readable descriptions of non-text content.
  • Cloud Google Gemini MyStuff Files | Cloud: Updated to include document artifact support.
  • Facebook Messages | iOS: Updated to support non-E2EE messages for version 540+.
  • iOS Facebook Messages | iOS: Updated to recover attachments from the AdvancedCrypto cache.
  • iOS iMessages/SMS/MMS | iOS: Updated parsing to include SIM value instead of Magnet-local-user.
  • iOS Photos Media Information | iOS: Updated to include Recently Viewed DateTime and View Count.
  • Microsoft Teams Accounts | iOS: Updated to include Principal Name (UPN).
  • Samsung Notes | Android: Updated to recover text-based messages exceeding 300 characters.
  • Snapchat Memories | iOS: Updated to support version 13.88.0+.
  • Snapchat | Android: Updated to include support for Bitmoji attachment recovery.
  • Telegram | Android: Updated to support Telegram versions 12.2.10 and 12.3.1.
  • Vehicle Locations | Vehicle: Updated parsing for additional location information.
  • WhatsApp Chats | Android: Updated to support WhatsApp version 2.26.14.

Cloud

  • Acquiring Google Gemini paid accounts now includes support for Notebooks.
  • Attachments are now extracted to an attachments subfolder when processing Discord Warrant Returns.
  • Axiom Process now includes AI Generated Audio attachments when acquiring Google Gemini accounts.
  • Axiom Process now supports the acquisition of AI Generated Videos and Audio files.
  • Axiom Process now supports the acquisition of paid Gemini accounts including Documents and Document Overview details.
  • Axiom Process now supports the acquisition of U.S. Government Azure cloud environments. Cyber
  • Cloud Accounts Information is now populated for Microsoft Cloud Copilot acquisitions.
  • Magnet Axiom now supports capturing video messages from Private Facebook Messenger.
  • Messages that were sent to your own account or (Favourites) are now included when acquiring Messages from Microsoft Teams.
  • Updated Microsoft Playwright to the latest version to address potential Node.js vulnerability.
  • Updated the processing of Gmail email artifacts found within Google Warrant Returns.

Processing

  • Axiom Process now offers an additional "Other" option for processing Vehicle chip-off images.
  • Updated iOS libcurl binaries to the latest version to address possible security vulnerabilities.
  • Updated the Passware SDK to the latest version.
  • When processing Android evidence, you can now optionally exclude selected folders that Axiom Process identifies as containing duplicate artifacts.
  • You can now filter results in the Case dashboard by evidence source and scan.

Examining

  • Axiom Examine now includes the ability to generate and include Bates numbering for PDF exports. Cyber
  • When accessing a case on a network, users are now notified if the case is already open. You can choose to open the case and override the existing lock.
  • When creating an Export for Magnet Review, you can now create the extract as a single compressed file.

Resolved Issues

  • Axiom Process could become unresponsive or perform very slowly if it encountered a non-unique index. -ENGN-15196
  • Axiom Process may have crashed when processing an iOS BFU extraction. -ENGN-15194
  • Enhanced progress messaging provides clearer visibility when creating a portable case. -EXM-5209
  • Exporting chat conversations to Magnet Exhibit Builder may have caused Axiom Examine to crash. -EXM-6239
  • Magnet Models 1.1.0.1566 and earlier did not include support for Multi-GPU systems. Download Magnet Models 1.1.3.2 to include support for Multi-GPU systems. -EXM-6126
  • Axiom Process may have crashed during the processing of iOS Private Photo Vault artifacts. -MARS-4054
  • Processing WeChat for Android may have timed-out and resulted in no artifacts being recovered. -MARS-4033
  • Resolved an issue where malformed/unknown data may have prevented the successful processing of eMule artifacts. -CARS-1900
  • Acquiring a Facebook Timeline account may have timed-out and resulted in Axiom Process crashing. -CA-2991
  • Apple Warrant Returns might have failed to decrypt due to changes in the backup schema. -CA-4041
  • Resolved "Access Denied" errors encountered when saving Outlook mail messages as PST files. -CA-4511
  • Resolved an issue where Axiom Process may have displayed "Unable to find user name" when performing Instagram Public acquisitions. -CA-4459
  • Resolved an issue where clicking on Google Apps after authenticating may have caused Axiom Process to crash for some accounts. -CA-4407

Security

  • Updated ImageMagick to 14.11.1 to address the following CVEs (CVE-2026-32636, CVE-2026-33535, CVE-2026-33536).

Blog Posts

Lastest blog posts