Magnet Axiom 10.2.0.49217

David Thorne

New Artefacts
- Apple Intelligence Photo Search | iOS: Added support for Apple Intelligence Photo Search.
- ChatGPT Group Conversation Members | iOS: Added support for ChatGPT Group Conversation Members.
- ChatGPT Group Conversations | Android: Added support for ChatGPT Group Conversations and ChatGPT Group Conversation Members.
- Cloud Google (Warrant Return)| Cloud: Added support for Cloud Google Chrome Autofill (Warrant Return) and Cloud Google Contact Info Artifacts (Warrant Return)
- Cloud Google Chrome Bookmarks (Warrant Return) | Cloud: Added support for Cloud Google Chrome Bookmarks (Warrant Return).
- Cloud Google Contacts (Warrant Return) | Cloud: Added support for Cloud Google Contacts (Warrant Return).
- Cloud Google Gemini Notebooks | Cloud: Added support for Cloud Google Gemini Notebooks.
- Cloud Google Mail Message Information (Warrant Return) | Cloud: Added support for Cloud Google Mail Message Information (Warrant Return).
- Cloud Google Maps Labeled Places (Warrant Return) | Cloud: Added support for Cloud Google Maps Labeled Places (Warrant Return).
- Google Account Change History (Warrant Return) | Cloud: Added support for Google Account Change History (Warrant Return).
- Vehicle Event Logs | Vehicle: Added support for Vehicle Event Logs.
- X (Twitter) Grok User Accounts | iOS: Added support for X (Twitter) Grok User Accounts.
Updated Artefacts
- Android Messages | Android: Updated parsing methods for identifying participants and recipients.
- ChatGPT Chats| Android, iOS : Updated to rename ChatGPT Chats to ChatGPT Conversations for iOS and Android platforms.
- ChatGPT Group Members | Android: Updated aggregation of artifacts to match iOS processing.
- ChatGPT Messages | Android: Updated to filter out system messages.
- ChatGPT Messages | Android: Updated to include support for hidden chat threads.
- ChatGPT Messages | Android: Updated to prevent duplicate streamed messages.
- ChatGPT Messages | iOS, Android : Updated to recover group chat messages.
- Cloud Copilot Messages: Cloud: Updated to include the fragment, "Additional Data" to capture human-readable descriptions of non-text content.
- Cloud Google Gemini MyStuff Files | Cloud: Updated to include document artifact support.
- Facebook Messages | iOS: Updated to support non-E2EE messages for version 540+.
- iOS Facebook Messages | iOS: Updated to recover attachments from the AdvancedCrypto cache.
- iOS iMessages/SMS/MMS | iOS: Updated parsing to include SIM value instead of Magnet-local-user.
- iOS Photos Media Information | iOS: Updated to include Recently Viewed DateTime and View Count.
- Microsoft Teams Accounts | iOS: Updated to include Principal Name (UPN).
- Samsung Notes | Android: Updated to recover text-based messages exceeding 300 characters.
- Snapchat Memories | iOS: Updated to support version 13.88.0+.
- Snapchat | Android: Updated to include support for Bitmoji attachment recovery.
- Telegram | Android: Updated to support Telegram versions 12.2.10 and 12.3.1.
- Vehicle Locations | Vehicle: Updated parsing for additional location information.
- WhatsApp Chats | Android: Updated to support WhatsApp version 2.26.14.
Cloud
- Acquiring Google Gemini paid accounts now includes support for Notebooks.
- Attachments are now extracted to an attachments subfolder when processing Discord Warrant Returns.
- Axiom Process now includes AI Generated Audio attachments when acquiring Google Gemini accounts.
- Axiom Process now supports the acquisition of AI Generated Videos and Audio files.
- Axiom Process now supports the acquisition of paid Gemini accounts including Documents and Document Overview details.
- Axiom Process now supports the acquisition of U.S. Government Azure cloud environments. Cyber
- Cloud Accounts Information is now populated for Microsoft Cloud Copilot acquisitions.
- Magnet Axiom now supports capturing video messages from Private Facebook Messenger.
- Messages that were sent to your own account or (Favourites) are now included when acquiring Messages from Microsoft Teams.
- Updated Microsoft Playwright to the latest version to address potential Node.js vulnerability.
- Updated the processing of Gmail email artifacts found within Google Warrant Returns.
Processing
- Axiom Process now offers an additional "Other" option for processing Vehicle chip-off images.
- Updated iOS libcurl binaries to the latest version to address possible security vulnerabilities.
- Updated the Passware SDK to the latest version.
- When processing Android evidence, you can now optionally exclude selected folders that Axiom Process identifies as containing duplicate artifacts.
- You can now filter results in the Case dashboard by evidence source and scan.
Examining
- Axiom Examine now includes the ability to generate and include Bates numbering for PDF exports. Cyber
- When accessing a case on a network, users are now notified if the case is already open. You can choose to open the case and override the existing lock.
- When creating an Export for Magnet Review, you can now create the extract as a single compressed file.
Resolved Issues
- Axiom Process could become unresponsive or perform very slowly if it encountered a non-unique index. -ENGN-15196
- Axiom Process may have crashed when processing an iOS BFU extraction. -ENGN-15194
- Enhanced progress messaging provides clearer visibility when creating a portable case. -EXM-5209
- Exporting chat conversations to Magnet Exhibit Builder may have caused Axiom Examine to crash. -EXM-6239
- Magnet Models 1.1.0.1566 and earlier did not include support for Multi-GPU systems. Download Magnet Models 1.1.3.2 to include support for Multi-GPU systems. -EXM-6126
- Axiom Process may have crashed during the processing of iOS Private Photo Vault artifacts. -MARS-4054
- Processing WeChat for Android may have timed-out and resulted in no artifacts being recovered. -MARS-4033
- Resolved an issue where malformed/unknown data may have prevented the successful processing of eMule artifacts. -CARS-1900
- Acquiring a Facebook Timeline account may have timed-out and resulted in Axiom Process crashing. -CA-2991
- Apple Warrant Returns might have failed to decrypt due to changes in the backup schema. -CA-4041
- Resolved "Access Denied" errors encountered when saving Outlook mail messages as PST files. -CA-4511
- Resolved an issue where Axiom Process may have displayed "Unable to find user name" when performing Instagram Public acquisitions. -CA-4459
- Resolved an issue where clicking on Google Apps after authenticating may have caused Axiom Process to crash for some accounts. -CA-4407
Security
- Updated ImageMagick to 14.11.1 to address the following CVEs (CVE-2026-32636, CVE-2026-33535, CVE-2026-33536).