Magnet AXIOM Cyber 7.10: AWS Sign-in Improvements & Animated Maps

The latest release of Magnet AXIOM Cyber is here, and we’re excited to share new features for analysis and cloud acquisitions.

In this release, new features and updates include:

• AWS Sign-in Improvements
• Animated Maps

We’ve also updated and added to our artifact support (updates are at the end of this blog.)

Upgrade to AXIOM Cyber 7.10 within the AXIOM Cyber interface or through the Customer Portal.

Haven’t tried AXIOM Cyber yet? Request your free trial here.

AWS Sign-In Improvements

Sometimes, it may be necessary to provide third-party service providers or internal departments (such as the DFIR team) temporary access to the organization’s AWS accounts for data acquisition.

In either case, it’s a security best practice to provide external parties or teams with the ability to assume a role that limits what they can access and for how long (among other security parameters.)

Additionally, AWS recommends adding an External ID to the role’s trust policy as an added layer of security when third parties assume roles within an account. It’s an optional measure that more organizations are integrating as part of their cloud security best practices.

With 7.10, we’ve added a field for External IDs to AXIOM Cyber’s AWS sign-in page. As a service provider or internal DFIR team, you can better adhere to your client’s or company’s security best practices when collecting data from AWS accounts by utilizing an External ID.

Along with the new External ID field, we’ve significantly improved the useability of the sign-in page to better align it with how data is configured in AWS.

Additionally, we’ve added the ability to sign-in to an AWS account using session credentials.

Unlike security credentials, which can be reused, and potentially allow a user to access the AWS account indefinitely, session credentials can only be used while the session is active, and if they’re tied to a role, you can limit a session duration to 1-12 hours.

Organizations use session credentials as an added security measure to limit ongoing access to an AWS account. Should access to the AWS account be required again, new session credentials would need to be provided.

Along with these new sign-in features, we’ve significantly improved the useability of the sign-in page to better align it with how data is configured in AWS.

Automatically Create Animated Maps from Geolocation Data

As with many things, seeing is believing. To help add important context to your reports and testimony in court, we have introduced Animated Maps in Magnet AXIOM and AXIOM Cyber.

With Animated Maps, you can show the user’s movement based on the geolocation information from device data, combining location and timestamp data to show the path they took during a given time frame. The ability to easily animate map routes mitigates time-consuming and labor-intensive manual processes required to display location evidence in an engaging and visually appealing format. 

To learn more about Animated Maps, check out the blog “Moving in the Right Direction with Animated Maps.”

New and Updated Artifacts 

We’re continually adding and updating artifacts based on the applications you’re coming across in your investigations.

This release includes new and updated artifacts, including:

NEW

• Edge Chromium
  (iOS, macOS, Windows)
  • Edge Chromium Current Session
  • Current Tabs
  • Last Sessions
  • Last Tabs
• Journals (iOS)
• Voice Mail (iOS)

UPDATED

• Apple Mail (iOS)
• Call Logs (Android)
• Chrome (Android)
  • Chrome Current Sessions
  • Current Tabs
  • Last Sessions
  • Last Tabs
• Chrome Cookies
  (iOS, macOS, Windows)
• Chrome Logins (Windows)
• Chrome Web Visits
  (Android, iOS, Linux, macOS, Windows)
• Digital Wellbeing Events (Android)
• Facebook Messenger Messages (Android)
• Instagram Direct Messages (iOS)
• Telegram (iOS)
  • Telegram Chats
  • Messages
  • User artifacts
• WeChat (Android)

Get Magnet AXIOM Cyber 7.10 Today!

Download AXIOM Cyber 7.10 over at the Customer Portal or upgrade within the application. 

Haven’t tried AXIOM Cyber yet? Request your free trial here.

The post Magnet AXIOM Cyber 7.10: AWS Sign-in Improvements & Animated Maps appeared first on Magnet Forensics.