Step by Step Guide to iOS Jailbreaking and Physical Acquisition
Oleg Afonin from Elcomsoft has posted a step by step guide on how to perform jailbreaking and physical acquisition of iOS de…
Creating a File System Image of iOS12
Apple’s iOS 12 is the latest iteration in their mobile device software. With each iteration Apple creates new system p…
iOS Mobile Installation Logs Parser
Alexis Brignoni has written a script for parsing all the logs in the /private/var/installd/Library/Logs/MobileInstalation/.l…
Forensic Challenges due to Encryption Mechanisms
Mobile devices investigation is a challenging field for forensic analysts, especially due to the increasing amount of data e…
Apple Pattern of Life Lazy Output’er (APOLLO)
Sarah Edwards presented a new tool called APOLLO or Apple Pattern of Life Lazy Output’er. The tool was presented at Ob…
Gone in 10 Seconds: Snapchat Forensics
John Walther has written an article about Snapchat forensics. He used an iOS device running 11.4.1 and an Android device run…
DFIR SQL Query Repository
Alexis Brignoni has started a collection of SQL query templates for digital forensics use, and already uploaded a bunch. It&…
Advanced Smartphone Forensics Poster Updated
SANS has updated Advanced Smartphone Forensics poster. You’ll learn how to deal with SQLite databases, ADB and libimob…
Using hashcat to decrypt iOS notes for Cellebrite’s Physical Analyzer
This video will show you how to decrypt encrypted notes (password protected) on iOS devices and enter the password into Cell…
Join our Telegram DFIR group!
Guys, we have created a Telegram group, where we will do our best to answer all your questions. We will be very happy if you…
