Using Magnet IEF, you can search for forensic artifacts from five different starting points: drives, files and folders, images, volume shadow copies and mobile file dumps and images. While you are offered three different search types (Full, Quick and Sector Level), it's recommended that you use the Full Search to retrieve as much data as possible.
Magnet IEF searches all areas of a drive and processes fragmented files more effectively than other methods. After your search begins, you can see how Magnet IEF uncovers artifacts live in the Report Viewer.
Copyright © 2017 Magnet Forensics
