Evidence stored in servers belonging to service providers like Facebook, Microsoft, and Google can be crucial in a law enforcement investigation—and also among the hardest to acquire. Even when submit a preservation letter and you get a warrant to force a provider to return data, collecting the data into a normalized, easy-to-analyze format can be tricky. what about consent and how far does that take you. This lab will focus on utilizing consent to collect Cloud data as well as utilizing Facebook’s warrant return support and ”Download Your Information” features for both Facebook and Instagram. We’ll describe how to ingest data into AXIOM Cloud and use commercial innovations to save time during investigations. We’ll also discuss how to acquire photos from Twitter without requiring user credentials, and features such as Magnet.AI that can help you identify key pieces of evidence.

If you would like to apply for a CPE credit for attending this lab session, Magnet Forensics will issue a certificate of attendance after the completion of the conference. In order to qualify for this certificate, you must validate your attendance by checking in and checking out of the session on-site.