Why I do What I do: Thanks Dad!
This post has both nothing and everything to do with why and how I do data forensics. I hope you'll take a moment to read it. I am a tenacious do-it-your-selfer in many areas of my life, including home...
View ArticleTextMe App: Lesson Learned from Unusual Tables
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleRecovering Data from Deleted SQLite Records: Redux
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleiPhone: Recovering from Recovery
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleMaking Sense of the Senseless
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleIdentifying Owners of Locked Android Devices
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleFinding Serial Numbers on Locked iPhones
Apple iDevices have their serial number engraved on the back, right? So why the article? Because it's not true of newer devices like the iPhone 5, 5s, and 5c. Also, original cases can be replaced and...
View ArticleSearching for Searches
In a recent examination of smart phone content, it became necessary to know the personal interests of the device's owner. You can browse internet and app history, but that can be extensive to review...
View ArticleIdentifying Android Device Owners
I work in a college town. That means lots of unsecured electronics. Lots of unsecured electronics means lots of thefts and 'misplaced'--"I'm not as think as you drunk I am!"--devices. I've seen a...
View ArticleGetting Attached: Apple Messaging Attachments
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleFinding Felons with the Find Command
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleURLs : U R Loaded with Information
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleRotten Apples: Watch out for Worms!
Oh, Apple, you've done it to me again!...With each iOS incarnation, key databases change structure. This is no secret to anyone who examines data from iDevices. The iOS4 sms.db differs greatly from...
View ArticleCracking Android Passwords: The Need for Speed
Impossibly Large Numbers RevisitedIn October, 2012 I posted about a article about cracking Android passwords. I spoke primarily on the difficulty in cracking the passwords based on the sheer number of...
View ArticleAndroid Messaging: Is Android Getting Religious?
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleCashing in on the Google Chrome Cache
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleXmount: When "Changing" the Evidence isn't so Bad
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleSQLite: Hidden Data in Plain Sight
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleiOS6 Photo Streams: "Recover" Deleted Camera Roll Photos
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View Article"Hashes? We don't need no stinking hashes!"
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleRiffbox and Windows 10
I decided to bite the bullet and try out Windows 10. I wanted to learn the new operating system and determine if I could run specific software/hardware combinations under the new Windows that I had...
View ArticleAndroid SDK on 64-bit Linux
I commonly use adb and fastboot to access Android devices. Ubuntu has packages for those tools making installation easy:$ sudo apt-get install android-tools-adb android-tools-fastbootBut, in recent...
View ArticleCompression and Android Gmail
/* Shared CSS for AsciiDoc xhtml11 and html5 backends */ /* Default font. */ body { font-family: Georgia,serif; } /* Title font. */ h1, h2, h3, h4, h5, h6, div.title, caption.title, thead,...
View ArticleTime Perspective
Time Perspective@charset "UTF-8";@import 'https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.2.0/katex.min.css';code{color:#c7254e;background-color:#f9f2f4;border-radius:4px}code,kbd{padding:2px...
View ArticleAndroid Pin/Password Cracking: Halloween isn't the Only Scary Thing in October
CCL Forensics did the mobile forensics world a great service when it released several python scripts for cracking Android gesture, pin, and password locks. I have mostly encountered gesture locks in my...
View Article