traditional workflow magnet automate · 2019-11-13 · day 01 day 02 day 03 day 04 day 05 11pm 9am...
TRANSCRIPT
To learn more, contact [email protected] visit magnetforensics.com/products/magnet-automate
© 2019 Magnet Forensics Inc. All rights reserved. Magnet Forensics® and related trademarks are the property of Magnet Forensics Inc. and used in countries around the world.
S C R O L L T O V I E W R E S U L T S
Due to the massive growth of digital evidence, it’s becoming impossible for the digital forensics lab to keep up. Labs need a more efficient way to image and process evidence.
In the test case we compared a traditional forensics workflow vs. Magnet AUTOMATE 2.0.
4.252M artifact hits1.263M media hits
S A M P L E C A S E 32GB500GB 500GB 500GB 160GB
D A Y 0 1
D A Y 0 2
D A Y 0 3
D A Y 0 4
D A Y 0 5
11PM
9AM
5PM
12AM
11PM
9AM
5PM
12AM
11PM
9AM
5PM
12AM
11PM
9AM
5PM
12AM
11PM
9AM
Devices arrive at lab for analysisDevices arrive at lab for analysis
Non-Working Hours
Imaging begins *Phone imaged separately
Imaging begins*Phone imaged separately
I M A G I N G C O M P L E T E 4:10:34I M A G I N G C O M P L E T E 4:13:39
J S O N I N G E S T I O N C O M P L E T E 15:03:45
Processing Begins
Processing Begins
P R O C E S S I N G C O M P L E T E 11:18:37
T I M E L I N E C O M P L E T E 00:55:47
J S O N E X P O R T C O M P L E T E 06:12:54
C O N N E C T I O N S C O M P L E T E 02:33:28
AUTOMATE builds Timeline
AUTOMATE builds Connections
P R O C E S S I N G C O M P L E T E 24:26:37
J S O N I N G E S T I O N C O M P L E T E 15:03:16
T I M E L I N E S C O M P L E T E 00:55:25
C O N N E C T I O N S C O M P L E T E 02:33:16
J S O N E X P O R T C O M P L E T E 06:12:46
AUTOMATE creates JSON export
AUTOMATE ingests JSON into Media Categorization Tool
Begin Evidence Review & Analysis
Begin Evidence Review & Analysis
Examiner manually builds Timeline
Examiner manually builds Connections
Examiner manually creates JSON Export
Examiner ingests JSON export into Media Categorization Tool
MAGNET AUTOMATETM
Complete investigations faster by powering a repeatable forensic workflow that minimizes downtime and maximizes efficiency.
MAGNET AUTOMATETraditional Workflow
L E G E N D
VST R A D I T I O N A L W O R K F L O W
M A G N E T A U T O M A T E
Downtime
Downtime
Downtime
Downtime
Reduce downtime by 94% and start reviewing your evidence 2 days sooner.
Processing Times
Working Hours
46H94H
11H 18M24H 24M
2H25H D O W N T I M E
P R O C E S S I N G
T O T A L T I M E