Magnet Forensic

Digital Evidence Investigator (DEI) is a comprehensive forensic software solution developed by Magnet Forensics, designed to assist digital investigators in analyzing and extracting evidence from various digital sources. When combined with the versatile penetration testing distro Kali Linux, DEI becomes an invaluable tool for forensic professionals, law enforcement agencies, and cybersecurity experts. Below, we'll delve into the features, installation process, and how to effectively use Digital Evidence Investigator on Kali Linux.

Digital Evidence Investigator (DEI) is a comprehensive digital forensics software solution developed by Magnet Forensics. It serves as a powerful tool for digital investigators, law enforcement agencies, cybersecurity professionals, and incident response teams to collect, analyze, and present digital evidence from various sources. DEI is designed to streamline the forensic investigation process and provide investigators with the necessary tools to uncover valuable insights from digital data.


  1. DEI supports the analysis of a wide range of digital evidence sources, including disk images, file systems, memory dumps, mobile devices (iOS and Android), cloud storage services, email archives, and web browser artifacts. This broad compatibility allows investigators to examine evidence from diverse sources in a unified environment.
  2. DEI offers advanced analysis capabilities for examining digital artifacts and extracting relevant information. It includes tools for file system analysis, keyword searching, timeline reconstruction, metadata extraction, and data carving. These features enable investigators to uncover hidden evidence, identify relevant artifacts, and reconstruct digital events.
  3. DEI provides integrated case management functionality to help investigators organize and manage their cases effectively. It includes features for case creation, evidence tagging, notes/documentation, report generation, and collaboration with team members. The case management system streamlines the investigative process, ensures proper documentation of findings, and facilitates collaboration among team members.
  4. DEI includes timeline analysis features that allow investigators to visualize and analyze digital evidence over time. Timeline analysis helps in reconstructing sequences of events, identifying correlations between activities, and establishing timelines of user actions. This provides valuable insights into digital forensic investigations and helps investigators understand the context of digital evidence.


  1. Visit the official Magnet Forensics website and navigate to the Downloads section. Locate the software you wish to install, such as Digital Evidence Investigator (DEI), and download the appropriate installer file for your operating system (Windows or macOS).
  2. Once the installer file has been downloaded, double-click on it to run the installation wizard. Follow the on-screen instructions to proceed with the installation process.
  3. During the installation process, you may be prompted to accept the license agreement for the software. Read through the terms and conditions carefully, and if you agree, click "Accept" to continue.
  4. Specify the directory where you want to install the Magnet Forensics software. You may choose the default installation directory or select a custom location if desired.
  5. Once the installation process is complete, you may be prompted to launch the software immediately or manually launch it later from the Start menu (Windows) or Applications folder (macOS).


  1. To run Magnet Forensics software, locate the program icon on your desktop (if created during installation) or navigate to the Start menu (Windows) or Applications folder (macOS) to find the installed application.
  2. Upon launching the software, you'll typically have the option to open an existing case or create a new case. If you're starting a new investigation, choose the option to create a new case and follow the prompts to provide case details.
  3. After creating or opening a case, you'll need to import digital evidence relevant to your investigation. This may include disk images, file systems, mobile device backups, memory dumps, or other sources of digital evidence.
  4. Once the evidence has been imported into the case, you can begin analyzing it using the tools and features provided by the Magnet Forensics software. This may involve conducting keyword searches, timeline analysis, metadata examination, and other forensic techniques to uncover relevant information.
  5. Throughout the investigation process, it's important to document your findings and any actions taken. Magnet Forensics software often includes features for adding notes, annotations, and bookmarks to the case file to record important details and observations.
  6. Finally, once the analysis is complete, you can generate reports summarizing your findings and conclusions. Magnet Forensics software typically offers customizable report templates and options for exporting reports in various formats for sharing with stakeholders.


Table of Contents: