• Apple Intelligence Privacy Reports | macOS: Added support for Apple Intelligence Privacy Reports.
• Axiom Examine now includes EXIF metadata and PhotoDNA hash data from image files attached to emails.
• ChatGPT Attachments | Android: Added support for ChatGPT Attachments.
• ChatGPT Attachments | iOS: Added support for ChatGPT Attachments.
• ChatGPT Messages | Computer: Added support for Windows web-based ChatGPT Messages.
• Cloud Google Export Summary (Warrant Return) | Cloud: Added support for Cloud Google Export Summary (Warrant Return).
• Cloud Google Voice Text (Warrant Return) | Cloud: Added support for Cloud Google Voice Text (Warrant Return).
• Computer - Outlook 11 Calendar | Computer: Added support for Computer - Outlook 11 Calendar.
• iOS Apple Intelligence | iOS: Added support for iOS Apple Intelligence and iOS Apple Intelligence Privacy Reports.
• Microsoft Teams Calls | iOS: Added support for Microsoft Teams Calls.
• Outlook 11 Contacts | Computer: Added support for Outlook 11 Contacts.
• Outlook 11 Emails | Computer: Added attachment support for Outlook 11 Emails.
• Yahoo! Japan Mail Messages | iOS: Added support for Yahoo! Japan Mail Messages.
• Yahoo! Route Search - Route Search History | Android: Added support for Yahoo! Route Search - Route Search History.

• EML(X) Files; Cloud Gmail Messages; Cloud MBOX Emails; MBOX E-mails; Windows Mail; Apple Mail | Computer: Updated parsing for refined sender and recipient information.
• Gmail Emails | iOS: Updated processing to account for updated folder path.
• Operating System Information | Computer: Updated method for obtaining OS information for newer versions of Windows.
• Session Groups | Android: Updated to support Session Groups for version 1.30.
• Session Messages | Android: Updated to support Session version 1.30.
• Snapchat Chat Messages | Android: Updated to support the retrieval of deleted snaps.
• Snapchat Group Chat Messages (Warrant Return) | Cloud: Updated processing for Snapchat Group Chat Messages (Warrant Return).
• Telegram | Android: Updated to support Telegram versions 12.2.10 and 12.3.1.
• Videos | Computer: Updated to recover Lens Model and Lens Serial Number, if available.

• Improved time to list available virtual machines when acquiring Azure virtual machines.

• $MFT files discovered in remote acquisition images will now be automatically processed using the $MFT workflow. Cyber
• Axiom Examine now includes extended timestamps for NTFS images.
• Clicking "View Evidence for this source" for MFT evidence sources on the Case Dashboard will now open the File system explorer.
• Device information is now properly uploaded to Magnet Review SaaS from Axiom Examine.
• Nexus hybrid agents now support downloading file and folder listings when acquiring multiple endpoints. Cyber
• The File system explorer now includes the identification of Alternative Data Streams (Has_ADS and Is_ADS) for $MFT. Cyber
• You can now manually sync to get the latest ReversingLabs YARA ruleset. Cyber

• Improved error handling when processing OCR images in Axiom Examine to allow the process to continue when encountering an error. -EXM-5719
• Resolved an issue introduced in Axiom 9.10.1 where Opencase.exe was required to be run twice to create the dependencies and open the portable case. -EXM-5725
• Resolved an issue where the Time zone dropdown could be blank after selecting "Use the system time zone". -EXM-5665
• Axiom Process has improved error handling and messaging when unable to parse picture attachments from a URI for Android SMS/MMS. -MARS-3613
• Improved the Signal decryption method to account for possible unexpected non-string values in Signal Windows Desktop version 7.28.0. -CARS-1796
• Resolved an issue for iOS Instagram Direct Messages where the non-local user name was not retrieved for Instagram versions 393 and above. -MARS-3493
• Updated the calculation of Expiration Date/Time for Android Session Messages and to account for the expiration in seconds. -MARS-3633
• Updated the process to populate the User Name fragment for newer versions of Instagram. -MARS-3598
• Updated the process to recover the Auto Login fragment for User Accounts - Windows. -CARS-1801
• Previously, acquiring iMessages may have produced an error stating "Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host". -CA-3973
• Resolved an issue that prevented Facebook Messenger messages from being acquired by Axiom Process. -CA-3896

• Security - CVE-2025-15467 - Addressed a vulnerability for OpenSSL 3.6, 3.5, 3.4, 3.3 and 3.0, where a stack buffer overflow may lead to a crash, causing Denial of Service, or potentially remote code execution.

• If you encounter an issue, search the knowledge base for troubleshooting information at support.magnetforensics.com.

At Magnet Forensics, we welcome your feedback and want to hear about your ideas to help us improve Magnet Axiom. You can submit your feedback for future consideration at the Magnet Axiom Ideas Portal.

Note: To access the Magnet Axiom Ideas Portal, you must sign in to the Support Portal.

• For previous release notes and information about previous releases, visit support.magnetforensics.com.