Part 1 - Desktop Part 2 - Mobile Part 3 - Activity I was planning on having this out last week but vacation got in the way (no complaints though). For part 4, we will walk through the Secret Project. When I originally got the disk image prior to the... [Read More]

Part 1 - Desktop Part 2 - Mobile For part 3, we will look at the activity portion that focuses on Sharepoint, network sessions, and notification popups. ACTIVITY 1. Sharepoint - How many files were downloaded from the megnetic4nsics Sharepoint? Parsed from the Chrome Downloads we can see one document... [Read More]

Part 1 - Desktop For part 2, we will take a look at the mobile image and the Google Takeout data to solve more questions. MOBILE 1. Image Type - What type of mobile image do you have? The file name of the zip export gives you a hint at... [Read More]

I got the chance to partake in the Magnet User Summit CTF once again this year with much better results (see my recap). Even though I didn't get all the answers right when I did it live, going back through on a second pass gives me a chance to finish... [Read More]

Only one day after BloomCON 0x04 ended, I was back on the road traveling to Nashville for Magnet Forensics User Summit 2019. To say it was an amazing 4 days in Music City is an understatement. Tuesday morning starting off with a #DFIRFit initiative to raise money for GirlsWhoCode. What... [Read More]