healthdb_secure
-
HEART: Health Events & Activity Reporting Tool
This free tool parses Apple Health and Fitness Application data from Apple iPhone extractions in a forensic manner. Continue reading
-
Beyond the Logs: Using the Health App to Uncover Device Model and OS History
This article explores both the healthdb_secure.sqlite and healthdb.sqlite databases for data indicating devices possessed by the user, reviews device information hand-in-hand with OS version and timeframes of use, and looks at information pointing to the current device model and OS version. Continue reading
-
Sleepless in Cupertino: A Forensic Dive into Apple Watch Sleep Tracking
How’s your sleep been lately? Currently, there are numerous sleep tracking and monitoring devices available to track, monitor, and quantify sleep patterns for users actively seeking to improve their sleep or just casually review sleep periods. For Apple users who also own an Apple Watch the solution may be on your wrist already. Sleep tracking,… Continue reading
-
Apple Watch – Worn Data Analysis
The article explores a lesser-known data point in Apple Health that shows when an Apple Watch is worn. This data indicates one-hour time periods when the Watch was worn and time segments when the Watch was not worn, which can be crucial for digital forensic investigations. Detailed here is how SQL queries can be used… Continue reading
-
Reviewing the new iOS Apple Health Workout Artifact through Magnet AXIOM 7.3
If you are like me, you likely follow Magnet Forensics for software updates and new or improved artifacts. Last month, Magnet Forensics announced the release of Magnet AXIOM 7.3 and among the list of improvements was the addition of a new iOS artifact for Apple Health Workout. This article will explore this new artifact and… Continue reading
-
Apple Fitness Workout Location Data: Leveraging the healthdb_secure.sqlite Database
iOS 16 brought many changes for digital forensics and one, seemingly, unexplored area was the increased wealth of location data stored within the healthdb_secure.sqlite database. The location data is stored within the “location_series_data” table of the database for specific workout activity types initiated on the Apple Watch. The data includes: a series identifier, timestamp, latitude,… Continue reading
About US
Metadata Forensics, LLC’s mission is to provide thorough and accurate digital investigation services. Seeking the digital truth is what we strive for in each case, and client satisfaction is one of our top priorities. Metadata Forensics, LLC has global experience in digital forensic investigations and uses the industry-leading tools in our quest for the answers our clients are seeking.
Here, we will post articles written by our Digital Forensic Examiners; highlighting original research, experiences, and other information to further the Digital Forensic Incident Response Community.
The Metadata Perspective 