Additional features and things that we really
like within this tool.
The Dynamic App Finder, which I mentioned to you,
that is going to be reported as custom.
In Physical Analyzer, it was reported as manual.
Internet of Things is awesome in this tool.
If you are looking for--
let's say you're working on crime,
and you think Alexa heard the crime being committed,
Alexa is parsed really well in AXIOM.
You are going to need the user credentials-- the Amazon
username and password-- to hear everything
that Alexa has heard.
A good example-- my son, when he was younger,
we went through a phase where we had
to listen to "Feliz Navidad" year-round-- year-round,
it was painful.
He would always say.
"Alexa play Feliz Naughty Dog."
What's crazy is when you look at the Alexa information
in internet of things, it would actually
show the request "Feliz Naughty Dog"
and then you would see Alexa responding, "Feliz Navidad."
So let's say that someone is speaking maybe
in a foreign language or asking Alexa to do something
and it's not the normal detected voice,
you could see that in the text.
If you have the person's Amazon username and password,
you can actually hear it.
It's amazing what you can get.
Think about how many times if you have Alexa, Google Home,
or any of these things in your house
that the ring spins or you see the lights lighting up
and you know it's listening to you.
All of those things can be parsed.
AXIOM is fantastic with that type of data.
We're going to look at timelining.
What's interesting about Magnet, they
took all of the colorization that we use in 50508,
and use those colors for the timeline-- so evidence
of execution and things like that-- file knowledge.
Mapping, obviously, is similar to what
we've seen in other tools.
You would go into world map view for that.
You can do connections.
Now, if I'm being honest, I'm not
a big fan of these spider webs of connections,
but you can do that.
Don't change the system preferences
to create connections upon parsing
or it's going to add a lot of time to it.
Do it on the fly as needed.
Where this could help you is potentially
in the CTF on Section 6.
There's also filtering.
There's image categorization.
There's all kinds of things I'm going to walk you through.