iOS Forensics
-
HEART: Health Events & Activity Reporting Tool
This free tool parses Apple Health and Fitness Application data from Apple iPhone extractions in a forensic manner. Continue reading
-
Hello! Who is on the Line?
Have you ever wondered how many individuals were on a phone call or Facetime call when reviewing data extracted from an iOS device? This question came up in a case recently when information was developed that multiple calls were said to be group calls. After reviewing the data in multiple commercial and open-source mobile forensic… Continue reading
-
Beyond the Logs: Using the Health App to Uncover Device Model and OS History
This article explores both the healthdb_secure.sqlite and healthdb.sqlite databases for data indicating devices possessed by the user, reviews device information hand-in-hand with OS version and timeframes of use, and looks at information pointing to the current device model and OS version. Continue reading
-
Sleepless in Cupertino: A Forensic Dive into Apple Watch Sleep Tracking
How’s your sleep been lately? Currently, there are numerous sleep tracking and monitoring devices available to track, monitor, and quantify sleep patterns for users actively seeking to improve their sleep or just casually review sleep periods. For Apple users who also own an Apple Watch the solution may be on your wrist already. Sleep tracking,… Continue reading
-
Apple Watch – Worn Data Analysis
The article explores a lesser-known data point in Apple Health that shows when an Apple Watch is worn. This data indicates one-hour time periods when the Watch was worn and time segments when the Watch was not worn, which can be crucial for digital forensic investigations. Detailed here is how SQL queries can be used… Continue reading
-
Siri’s Memory Lane: Exploring the siriremembers Database
The siriremembers.sqlite3 database, simply put, is a combination of Biome and the interactionC database. In this article, we explore this new SQLite database, cover parsing key data through SQL queries, and discuss additional important factors for the future and understanding this database. Continue reading
-
Reviewing Belkasoft’s iOS Forensics with Belkasoft Course
If you follow Belkasoft on LinkedIn, you not only have access to their latest blogs and resources but occasionally the opportunity to take one of their courses – free of charge. In this article, I will review iOS Forensics with Belkasoft, a course that usually costs $989.00, now freely available through October 15, 2023! Continue reading
About US
Metadata Forensics, LLC’s mission is to provide thorough and accurate digital investigation services. Seeking the digital truth is what we strive for in each case, and client satisfaction is one of our top priorities. Metadata Forensics, LLC has global experience in digital forensic investigations and uses the industry-leading tools in our quest for the answers our clients are seeking.
Here, we will post articles written by our Digital Forensic Examiners; highlighting original research, experiences, and other information to further the Digital Forensic Incident Response Community.
The Metadata Perspective 