Our latest course review is now available! 📱🧠 Explore Hexordia’s Mobile Data Structures: Honing Your Digital Forensic Edge for our thoughts on this course. 📈📊 Find it here: tinyurl.com/msb27jyz 🔗

Many thanks to Oxygen Forensics for the opportunity to speak at this great event. Excited to share original research and insights into new and emerging data from the Health and Workout applications. Hope to see you Tuesday!

Let’s discuss: unpopular opinion? iOS 18: AFU is <72 hrs from reboot and BFU state. Lot of extraction ASAP talk, regardless of search auth. You can articulate, but with auth prior you don’t have to. What am I missing? Are auths after device seizure really going beyond 24 hrs?

This Thanksgiving, I’m grateful for the opportunity to make a difference and help bring justice to light. It’s the small details that matter, and I’m thankful to be part of a journey that strives for truth and fairness for all. Wishing everyone a meaningful Thanksgiving!

🔍 New article from Metadata Forensics! 📱 “Hello! Who is on the Line?” – we’re diving into parsing iPhone group calls, something not previously supported by commercial or open-source mobile forensic tools. Check it out 👉 tinyurl.com/3n6c3374

Many thanks to Magnet Forensics, Hexordia, and the CTF authors for this great experience! Glad the timing worked out that I was able to participate - really enjoyable, creative, and challenging. Still may go back and look at some more of these questions..

We’re thrilled to unveil "Legal Bytes in a Digital World," our new article series examining the intersection of law, technology, and digital forensics. In our debut piece, we explore US v. Strong - available here: tinyurl.com/ymn2ju28 Stay tuned for more!

Excited for this release, best is yet to come with the LEAPPs! Fantastic project, resource, and tool

🚀 Google Location History Takeout Parser Version 1.3.0.0 is here! 🎉 With enhanced KML support (TimeSpans, Descriptions & LineStrings), taking your data to the next level. Continue leveraging Google Location History Takeout & Warrant Return data. 👉 tinyurl.com/2s8yzksx

🚀 Google Location History Timeline Parser v 1.4 is now available! This release features multithreaded processing, time elapsed tracking, input file size calculation, and location-related files including HTML, CSV, and TXT. Available here: tinyurl.com/4dr3tuv5

Thanks to our great DFIR Community and discussion on the matter, I’m happy to announce our Google Location History Takeout Parser, Version 1.4.1. We’ve added Horizontal Accuracy KMLs for Records.JSON data and Parking Events. Get it at tinyurl.com/4aua56u4 Google Earth example:

HEART by Metadata Forensics (Health Events & Activity Reporting Tool) Free tool to parse Apple Health & Fitness data from FFS Extractions. 🔍 31+ artifacts supported 📊 HTML report + CSV/PDF export ⬇️ Download: tinyurl.com/v8zesb7h 📖 Article: tinyurl.com/94rx6vk4

🚀 New release! HEART by Metadata Forensics (Health Events & Activity Reporting Tool) Version 1.1.0.0! Now supporting TAR, DAR (some), Advanced Logical (Encrypted) Extractions, iTunes Encrypted Backups. ⬇️ Download: tinyurl.com/v8zesb7h 📖 Article: tinyurl.com/94rx6vk4

🧩 RowIDetective 🕵️‍♂️ formerly detailed Lagging for the Win: Querying for Negative Evidence in the sms.db. Now detecting missing messages at the end of Apple sms.db. Because every gap tells a story. 🔗 github.com/MetadataForens…

Ever wondered what secrets are in your Apple Contacts? 📱 iQueryContacts 🕵️ is our new advanced SQL query work for the AddressBook.sqlitedb. All the classic data plus some new info including the Chinese lunar birthday! Find out more at github.com/MetadataForens…