iOS 15 Image Forensics Analysis and Tools Comparison - Native Apps blog.digital-forensics.it/2023/10/ios-15… #DFIR #mobileforensics

Few corrections coming on the third blog post. Already working on the fourth one: third-party communication apps. A huge one 😅 #dfir #mobileforensics

Post on third-party social networking and communication apps almost ready! A huuuge one! #dfir #mobileforensics

iOS 15 Image Forensics Analysis and Tools Comparison - Communication and Social Networking Apps blog.digital-forensics.it/2023/11/ios-15… #DFIR #mobileforensics

iOS 15 Image Forensics Analysis and Tools Comparison - Browsers, Mail Clients, and Productivity apps blog.digital-forensics.it/2023/11/ios-15… #DFIR #mobileforensics

BrowserState has come up a few times recently and certainly deserves an explanation. But what else could “last_visited_time” mean? doubleblak.com/browserstate

Working on the next couple of posts on iOS comparison. Also, working on some tests and a blog post on what you can still hope to find after an app has been uninstalled. #dfir #mobileforensics

Last blog post of the year: "Has the user ever used the XYZ application? aka traces of application execution on mobile devices" blog.digital-forensics.it/2023/12/has-us… #dfir #mobileforensics

A great class!

Analysis of Android settings during a forensic investigation #dfir #mobileforensics blog.digital-forensics.it/2024/01/analys…

A first look at Android 14 forensics #dfir #mobileforensics blog.digital-forensics.it/2024/01/a-firs…

Dissecting the Android WiFiConfigStore.xml for forensic analysis #dfir #mobileforensics blog.digital-forensics.it/2024/02/dissec…

Windows Thumbnail caches are a mostly unused artifact. Did you know they can point to paths on external systems? (Yes path embedded in thumbcache file, not from win search db) Can be helpful when threat actors actively delete logs and other artifacts! #DFIR

A great job by David Porco: AChoirX for Android based on our Android Triage! Red the blog and download and test the tool! musectech.com/2024/03/achoir… #dfir #mobileforensics

Submit your proposal! sans.org/mlp/dfir-summi… #dfir

Happy to announce that the new SANS "iOS Third Party Apps Poster" and "Android Third Party Apps Poster" are finally out! #DFIR #mobileforensics sans.org/posters/ios-th… sans.org/posters/androi…

The new SANS Advanced Smartphone Forensics poster is out! Cc/ Heather Mahalik Barnhart domenica #dfir #mobileforensics for585.com/poster

Can’t wait to teach the latest update at SANS Amsterdam July 2024! #dfir #mobileforensics

Last week to submit for SANS DFIR Europe Summit 2024! #dfir survey.sans.org/jfe/form/SV_5a…

A first look at iOS 18 #DFIR #mobileforensics blog.digital-forensics.it/2024/09/a-firs…