Analysis of the ABTraceTogether app (iOS)
I decided to have a look at the ABTraceTogether contract tracing app released by the Alberta Government today (May 1 2020) and blog about my findings. There's potential for conspiracy theories and...
Category: Mobile Forensics
← All Posts
KnowledgeC: Now Playing entries
I know it's been ages since I've posted! I have been settling in with Magnet Forensics and have to say - it's been an incredible experience so far. I continue to be amazed and inspired by the...
Photo Vault app still pwnable in 2021? An adventure in iOS RE
Update 2021/08/22: Thanks to a tip from a reader, it was brought to my attention that PPV iOS made some pretty big changes in a recent update (early August 2021 - version 11.9). In reading the...
Obtain a logical dump of Signal data on Android with signal-back
I've had a number of people asking for a walkthrough on this process so thought I'd make it into this week's blog entry. It's not a particularly technical process and I'm the first to admit doesn't...
forensicBlend: Designing a scalable community plugin API
I decided to start writing this series to document my work on forensicBlend, a project I previewed on Twitter yesterday that takes device logs and translates them into a modern report format that can...
iOS Photos.sqlite Forensics
Discussing with Shafik the correlation of photo albums to pictures on iOS using Photos.sqlite.
Aggregating iOS PowerLog data using C# - Part 1
Building on the work of Sarah Edwards to re-unify the PowerLog database with C# before running APOLLO.
MPT - LG's incognito version of KnowledgeC
Learn how LG has been tracking its users for years, and how devices are not purging this data on a factory reset.