Windows Forensics Cookbook

How to do it...

The steps to process and analyze data using Magnet AXIOM are as follows:

1. Start the Magnet AXIOM Process.
2. The first window you will see is CASE DETAILS, as you can see in the following figure:

Figure 5.8. Magnet AXIOM CASE DETAILS window

Here, we have four main parts:

• LOCATION FOR CASE FILES - Here, you should choose the Folder name and File path being created during processing.
• LOCATION FOR ACQUIRED EVIDENCE - If you plan to acquire drives or mobile devices via AXIOM, choose the Folder name and File path for them, or just choose the same path as for case files.
• CASE INFORMATION - Type in your case number, your name, and ...