Tag Index

 2022 (2) 4Cast Awards (2) ADB (1) ALEAPP (13) AXIOM (9) Abe (1) Adam Firman (1) Android (22) Android 12 (2) Apple (3) Apple Health (1) Arsenal Image Mounter (3) Audacity (1) Aukey (2) Autopsy (3) AxCrypt (1) BSides (1) Belkasoft (2) Beth (2) BloomCON (5) Bloomsburg (1) Bookmarks (1) Bulk Extractor (2) Bumble (2) CCDFA (1) CTF (61) Cellebrite (12) Cello (1) Chewing the FAT (1) Chrome (2) Chromebook (1) Chromium (1) Con (4) Cookies (1) Cyber5W (1) CyberChef (3) DB Browser for SQLite (5) DFIR (1) DFIR Summit (2) DFIRmas (1) DME Forensics (1) Device Health Services (1) Discord (1) DocList (1) Downloads (1) EZ Tools (1) Egg (1) Error Code (1) Evernote (1) ExifTool (4) FTK Imager (4) Felix (1) Files by Google (1) Firefox (3) Forensic Happy Hour (1) Form History (1) GASF (1) GIAC (1) Garmin (1) Gboard (1) Google (2) Google Call Screen (1) Google Docs (1) Google Duo (1) Google Takeout (3) Google Tasks (1) GrayShift (1) Heisenberg (1) Hexordia (3) Hindsight (1) Hitchhiker's Guide to DFIR (1) Hunt! (3) HxD (1) KAPE (2) Kik (1) Lee Reiber (1) Life360 (2) Linux (1) MFTECmd (1) Mac (1) Magnet (1) Magnet Forensics (19) Magnet User Summit (25) Magnet Virtual Summit (7) March 2022 (1) Marsha (5) Mastodon (2) Media History (1) MemProcFS (2) Motion Photos (1) Mozilla (3) NahamCon (1) Network Action Predictor (1) Network Miner (2) Networks (2) NotePad++ (4) Now Playing (1) PC (1) PECmd (1) PHP (1) Passware (1) Permissions (1) Phil Cobley (1) Physical Analyzer (3) Pixel (4) Power Off Reset (1) RLEAPP (2) Recently Closed Tabs (1) Registry Explorer (1) SANS (3) SQLiteWalker (1) SRUM DUMP (1) Samsung (2) Search Terms (1) Semantic Location History (1) Server (1) Settings Services (1) Splitwise (1) Start.Me (1) StartMe (34) Tech Tuesday (2) TeraCopy (4) TeraLogger (1) Timeline Explorer (1) Top Sites (1) Tusky (1) USB Detective (1) Unfurl (1) Veracrypt (1) Volatility (4) Web History (1) Web Visits (1) Windows (3) Windows 11 (1) Windows explorer (1) Wireshark (1) YouTube (1) ZipWalker (1) application usage (1) audio (1) battery (2) bluetooth (2) book (1) books (1) bstrings (2) charging (1) cipher (4) clipboard (1) cloud (1) dcode.fr (2) egg hunt (1) headphone audio levels (1) history (1) hunt (1) iLEAPP (5) iOS (11) iOS 16 (1) iPhone (8) iTunes backup (1) memory (5) msgpack (1) music (1) nominations (1) plist (1) podcast (3) power (1) protobuf (2) release (1) restart (1) restore log (1) scripts (1) shellbags (1) shutdown (1) shutdown checkpoints (1) sqlite (1) system (1) test (2) tools (2) training (1) turbo (3) turbo.db (1) update (1) updates (34)

 2022 (2)

BloomCON 0x06 Forensics CTF
My 2022 Forensic 4Cast Awards Nominations

 4Cast Awards (2)

My 2022 Forensic 4Cast Awards Nominations
My 2021 Forensic 4Cast Awards Nominations

 ADB (1)

Magnet Weekly CTF (Week 1) - Hosts File

 ALEAPP (13)

Magnet User Summit 2023 CTF - Android (Part 2)
Magnet User Summit 2023 CTF - Android (Part 1)
Gboard and Clipboard History
Gabbing about Garmin Connect for Android
Thawing the Ice Age Pt. 2 - Tusky on Android
Thawing the Ice Age - Mastodon on Android
The Bots are Buzzing - Bumble on Android
Cellebrite CTF 2022 - Heisenberg's Android
Magnet Virtual Summit 2022 CTF - Android
Chrome Network Action Predictor, Preloading all your Webpages
Chrome Media History Tracking Your Viewing Habits
Magnet Weekly CTF (Week 2) - Chrome Artifacts
Magnet Weekly CTF (Week 1) - Hosts File

 AXIOM (9)

Magnet User Summit 2023 CTF - Android (Part 2)
Magnet User Summit 2022 CTF - Linux
Cellebrite CTF 2022 - Marsha's PC
Magnet Virtual Summit 2022 CTF - Android
Magnet Virtual Summit 2021 CTF - Google Takeout
Magnet Virtual Summit 2021 CTF - Mac
Magnet Virtual Summit 2021 CTF - iPhone
Magnet Virtual Summit 2021 CTF - Chromebook
Belkasoft CTF - March 2021

 Abe (1)

Cellebrite CTF 2023 - Abe

 Adam Firman (1)

Chewing the FAT Podcast - Finding Flags and Pulling Pints

 Android (22)

Magnet Virtual Summit 2024 CTF - Android
Analyzing Life360 on Android
Magnet User Summit 2023 CTF - Android (Part 2)
Magnet User Summit 2023 CTF - Android (Part 1)
Gabbing about Garmin Connect for Android
Thawing the Ice Age Pt. 2 - Tusky on Android
Thawing the Ice Age - Mastodon on Android
The Bots are Buzzing - Bumble on Android
Magnet Virtual Summit 2022 CTF - Android
Firefox on Android - Cookies, Permissions & Form History
Firefox on Android - Downloads, Top Sites & Recently Closed Tabs
Firefox on Android - Web History, Visits, Bookmarks & Search Terms
Cellebrite CTF 2021 - Heisenberg's Android
May I Ask Who's Calling - Google Call Screen
Google Duo - Android & iOS Forensic Analysis
Turbo Pt. 3 - Device Health Services Application Usage
Android Bluetooth Connection Configuration
Turbo Strikes Again - Tracking Bluetooth Device Battery
Files By Google: More Mobile Explorer Artifacts
Charging Battery with Turbo DB
Google Docs - Cello & DocList DBs
Google Pixel Now Playing History

 Android 12 (2)

Shutdown Checkpoints in Android 12
Application Battery Usage via Settings Services

 Apple (3)

Restore Log - Tracking iOS Update History
Cellebrite CTF 2021 - Marsha's Backup
Cellebrite CTF 2021 - Marsha's iPhone

 Apple Health (1)

Audio and App Usage in Apple Health

 Arsenal Image Mounter (3)

Magnet User Summit 2022 CTF - Linux
Belkasoft CTF - March 2021
10 Free Forensic Tools I Can't Live Without

 Audacity (1)

Belkasoft CTF - March 2022

 Aukey (2)

Tech Tuesday: Aukey LC-C6 Wireless Charger
Tech Tuesday: Aukey PB-Y13 Portable Charger

 Autopsy (3)

Belkasoft CTF - March 2022
BloomCon 0x05 Forensics CTF
10 Free Forensic Tools I Can't Live Without

 AxCrypt (1)

Chopping Down Artifacts from AxCrypt

 BSides (1)

BSidesDE 2018 Recap

 Belkasoft (2)

Belkasoft CTF - March 2022
Belkasoft CTF - March 2021

 Beth (2)

Cellebrite CTF 2022 - Beth's iPhone
Cellebrite CTF 2021 - Beth's iPhone

 BloomCON (5)

BloomCON 0x06 Forensics CTF
BloomCON 0x05 Networks CTF - Exfiltration Investigation (Challenge 2)
BloomCon 0x05 Networks CTF - Who Am I? (Challenge 1)
BloomCon 0x05 Forensics CTF
BloomCON 0x04 Recap

 Bloomsburg (1)

BloomCON 0x06 Forensics CTF

 Bookmarks (1)

Firefox on Android - Web History, Visits, Bookmarks & Search Terms

 Bulk Extractor (2)

Belkasoft CTF - March 2021
Magnet Weekly CTF (Week 10) - Warren's Memory Redux

 Bumble (2)

The Bots are Buzzing - Bumble on Android
What's the Buzz - Bumble on iOS

 CCDFA (1)

Cyber5W's CCDFA Certification - A Review

 CTF (61)

Magnet Virtual Summit 2024 CTF - Android
Magnet Virtual Summit 2024 CTF - iOS
Magnet Virtual Summit 2024 CTF - Cipher
Cellebrite CTF 2023 - Felix
Cellebrite CTF 2023 - Abe
NahamCon CTF 2023 - Forensics
Magnet User Summit 2023 CTF - Cipher
Magnet User Summit 2023 CTF - Android (Part 2)
Magnet User Summit 2023 CTF - Android (Part 1)
Magnet User Summit 2023 Recap
Magnet Virtual Summit 2023 CTF - Windows Server
Magnet Virtual Summit 2023 CTF - Cipher
Magnet Virtual Summit 2023 CTF - Windows 11
Magnet User Summit 2022 CTF - Linux
Magnet User Summit 2022 CTF - iPhone
Magnet User Summit 2022 CTF - Egg Hunt
Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Beth's iPhone
Cellebrite CTF 2022 - Heisenberg's Android
Cellebrite CTF 2022 - Marsha's PC
Magnet Virtual Summit 2022 CTF - Android
Magnet Virtual Summit 2022 CTF - Egg Hunt
BloomCON 0x06 Forensics CTF
Belkasoft CTF - March 2022
Cellebrite CTF 2021 - Marsha's PC
Cellebrite CTF 2021 - Marsha's iPhone
Cellebrite CTF 2021 - Beth's iPhone
Cellebrite CTF 2021 - Heisenberg's Android
Magnet Virtual Summit 2021 CTF - Google Takeout
Magnet Virtual Summit 2021 CTF - Mac
Magnet Virtual Summit 2021 CTF - iPhone
Magnet Virtual Summit 2021 CTF - Hunt!
Magnet Virtual Summit 2021 CTF - Chromebook
BloomCON 0x05 Networks CTF - Exfiltration Investigation (Challenge 2)
BloomCon 0x05 Networks CTF - Who Am I? (Challenge 1)
BloomCon 0x05 Forensics CTF
Belkasoft CTF - March 2021
Magnet Weekly CTF - Grand Prize Challenge
Magnet Weekly CTF (Week 11) - Warren's Memory Part 3
Magnet Weekly CTF (Week 10) - Warren's Memory Redux
Magnet Weekly CTF (Week 9) - Warren's Memory
Magnet Weekly CTF (Week 8) - PHP Cluster
Magnet Weekly CTF (Week 7) - IP Interfaces
Magnet Weekly CTF (Week 6) - Error Codes
Magnet Weekly CTF (Week 5) - Hadoop Logs
Magnet Weekly CTF (Week 4) - Phishing for GUIDs
Magnet Weekly CTF (Week 3) - Motion Photos
Magnet Weekly CTF (Week 2) - Chrome Artifacts
Magnet Weekly CTF (Week 1) - Hosts File
Magnet Virtual Summit 2020 CTF (Windows)
Magnet Virtual Summit 2020 CTF (Android)
Magnet Virtual Summit 2020 CTF (Memory)
Magnet Virtual Summit 2020 CTF (iOS)
Magnet Virtual Summit 2020 CTF (Egg Hunt)
CTF on a Budget - Magnet User Summit 2019 (Part 4) - Secret Project
CTF on a Budget - Magnet User Summit 2019 (Part 3) - Activity
CTF on a Budget - Magnet User Summit 2019 (Part 2) - Mobile
CTF on a Budget - Magnet User Summit 2019 (Part 1) - Desktop
CTF on a Budget - Magnet User Summit 2018 (Part 3)
CTF on a Budget - Magnet User Summit 2018 (Part 2)
CTF on a Budget - Magnet User Summit 2018 (Part 1)

 Cellebrite (12)

Cellebrite CTF 2023 - Felix
Cellebrite CTF 2023 - Abe
Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Beth's iPhone
Cellebrite CTF 2022 - Heisenberg's Android
Cellebrite CTF 2022 - Marsha's PC
Cellebrite CTF 2021 - Marsha's Backup
Cellebrite CTF 2021 - Marsha's PC
Cellebrite CTF 2021 - Marsha's iPhone
Cellebrite CTF 2021 - Beth's iPhone
Cellebrite CTF 2021 - Heisenberg's Android
Magnet Virtual Summit 2021 CTF - iPhone

 Cello (1)

Google Docs - Cello & DocList DBs

 Chewing the FAT (1)

Chewing the FAT Podcast - Finding Flags and Pulling Pints

 Chrome (2)

Chrome Network Action Predictor, Preloading all your Webpages
Chrome Media History Tracking Your Viewing Habits

 Chromebook (1)

Magnet Virtual Summit 2021 CTF - Chromebook

 Chromium (1)

Chrome Media History Tracking Your Viewing Habits

 Con (4)

My First SANS DFIR Summit Experience
Magnet User Summit (2019) Recap
BloomCON 0x04 Recap
BSidesDE 2018 Recap

 Cookies (1)

Firefox on Android - Cookies, Permissions & Form History

 Cyber5W (1)

Cyber5W's CCDFA Certification - A Review

 CyberChef (3)

Magnet User Summit 2022 CTF - Egg Hunt
Cellebrite CTF 2022 - Beth's iPhone
Magnet Virtual Summit 2021 CTF - Hunt!

 DB Browser for SQLite (5)

Magnet User Summit 2022 CTF - iPhone
Cellebrite CTF 2022 - Heisenberg's Android
Files By Google: More Mobile Explorer Artifacts
Google Docs - Cello & DocList DBs
10 Free Forensic Tools I Can't Live Without

 DFIR (1)

Hitchhiker's Guide to DFIR v1 Officially Released!

 DFIR Summit (2)

SANS DFIR Summit 2023 Recap
My First SANS DFIR Summit Experience

 DFIRmas (1)

Merry DFIRmas & a Happy New Year

 DME Forensics (1)

Magnet User Summit 2023 Recap

 Device Health Services (1)

Turbo Pt. 3 - Device Health Services Application Usage

 Discord (1)

Hitchhiker's Guide to DFIR v1 Officially Released!

 DocList (1)

Google Docs - Cello & DocList DBs

 Downloads (1)

Firefox on Android - Downloads, Top Sites & Recently Closed Tabs

 EZ Tools (1)

10 Free Forensic Tools I Can't Live Without

 Egg (1)

Magnet Virtual Summit 2022 CTF - Egg Hunt

 Error Code (1)

Magnet Weekly CTF (Week 6) - Error Codes

 Evernote (1)

Magnet Weekly CTF (Week 4) - Phishing for GUIDs

 ExifTool (4)

Cellebrite CTF 2022 - Heisenberg's Android
Magnet Virtual Summit 2022 CTF - Android
Magnet Weekly CTF - Grand Prize Challenge
10 Free Forensic Tools I Can't Live Without

 FTK Imager (4)

NahamCon CTF 2023 - Forensics
Magnet User Summit 2022 CTF - Linux
Cellebrite CTF 2022 - Marsha's PC
10 Free Forensic Tools I Can't Live Without

 Felix (1)

Cellebrite CTF 2023 - Felix

 Files by Google (1)

Files By Google: More Mobile Explorer Artifacts

 Firefox (3)

Firefox on Android - Cookies, Permissions & Form History
Firefox on Android - Downloads, Top Sites & Recently Closed Tabs
Firefox on Android - Web History, Visits, Bookmarks & Search Terms

 Forensic Happy Hour (1)

Forensic Happy Hour - Pour Me Another Round

 Form History (1)

Firefox on Android - Cookies, Permissions & Form History

 GASF (1)

Getting GASF'ed with GIAC

 GIAC (1)

Getting GASF'ed with GIAC

 Garmin (1)

Gabbing about Garmin Connect for Android

 Gboard (1)

Gboard and Clipboard History

 Google (2)

Chrome Media History Tracking Your Viewing Habits
Google Pixel Now Playing History

 Google Call Screen (1)

May I Ask Who's Calling - Google Call Screen

 Google Docs (1)

Google Docs - Cello & DocList DBs

 Google Duo (1)

Google Duo - Android & iOS Forensic Analysis

 Google Takeout (3)

It's All About Semantics, Location History That Is
Check Marks the Spot - Google Tasks from Takeout
Magnet Virtual Summit 2021 CTF - Google Takeout

 Google Tasks (1)

Check Marks the Spot - Google Tasks from Takeout

 GrayShift (1)

Magnet User Summit 2023 Recap

 Heisenberg (1)

Cellebrite CTF 2021 - Heisenberg's Android

 Hexordia (3)

Magnet Virtual Summit 2024 CTF - Android
Magnet Virtual Summit 2024 CTF - iOS
Magnet Virtual Summit 2024 CTF - Cipher

 Hindsight (1)

10 Free Forensic Tools I Can't Live Without

 Hitchhiker's Guide to DFIR (1)

Hitchhiker's Guide to DFIR v1 Officially Released!

 Hunt! (3)

Magnet User Summit 2022 CTF - Egg Hunt
Magnet Virtual Summit 2022 CTF - Egg Hunt
Magnet Virtual Summit 2021 CTF - Hunt!

 HxD (1)

NahamCon CTF 2023 - Forensics

 KAPE (2)

NahamCon CTF 2023 - Forensics
10 Free Forensic Tools I Can't Live Without

 Kik (1)

Ain't That a Kik in the Head

 Lee Reiber (1)

Forensic Happy Hour - Pour Me Another Round

 Life360 (2)

Analyzing Life360 on iOS
Analyzing Life360 on Android

 Linux (1)

Magnet Weekly CTF (Week 5) - Hadoop Logs

 MFTECmd (1)

BloomCon 0x05 Forensics CTF

 Mac (1)

Magnet Virtual Summit 2021 CTF - Mac

 Magnet (1)

Magnet User Summit 2023 Recap

 Magnet Forensics (19)

Magnet Virtual Summit 2023 CTF - iOS 16 iPhone
Magnet Virtual Summit 2023 CTF - Windows Server
Magnet Virtual Summit 2023 CTF - Cipher
Magnet Virtual Summit 2023 CTF - Windows 11
Magnet User Summit 2022 CTF - Egg Hunt
Magnet Weekly CTF - Grand Prize Challenge
Magnet Weekly CTF (Week 12) - Warren's Final Memory
Magnet Weekly CTF (Week 11) - Warren's Memory Part 3
Magnet Weekly CTF (Week 10) - Warren's Memory Redux
Magnet Weekly CTF (Week 9) - Warren's Memory
Magnet Weekly CTF (Week 8) - PHP Cluster
Magnet Weekly CTF (Week 7) - IP Interfaces
Magnet Weekly CTF (Week 6) - Error Codes
Magnet Weekly CTF (Week 5) - Hadoop Logs
Magnet Weekly CTF (Week 4) - Phishing for GUIDs
Magnet Weekly CTF (Week 3) - Motion Photos
Magnet Weekly CTF (Week 2) - Chrome Artifacts
Magnet Weekly CTF (Week 1) - Hosts File
Magnet User Summit (2019) Recap

 Magnet User Summit (25)

Magnet User Summit 2023 CTF - Cipher
Magnet User Summit 2023 CTF - Android (Part 2)
Magnet User Summit 2023 CTF - Android (Part 1)
Magnet User Summit 2023 Recap
Magnet User Summit 2022 CTF - Linux
Magnet User Summit 2022 CTF - iPhone
Magnet Virtual Summit 2022 CTF - Android
Magnet Virtual Summit 2022 CTF - Egg Hunt
Magnet Virtual Summit 2021 CTF - Google Takeout
Magnet Virtual Summit 2021 CTF - Mac
Magnet Virtual Summit 2021 CTF - iPhone
Magnet Virtual Summit 2021 CTF - Hunt!
Magnet Virtual Summit 2021 CTF - Chromebook
Magnet Virtual Summit 2020 CTF (Android)
Magnet Virtual Summit 2020 CTF (Memory)
Magnet Virtual Summit 2020 CTF (iOS)
Magnet Virtual Summit 2020 CTF (Egg Hunt)
CTF on a Budget - Magnet User Summit 2019 (Part 4) - Secret Project
CTF on a Budget - Magnet User Summit 2019 (Part 3) - Activity
CTF on a Budget - Magnet User Summit 2019 (Part 2) - Mobile
CTF on a Budget - Magnet User Summit 2019 (Part 1) - Desktop
Magnet User Summit (2019) Recap
CTF on a Budget - Magnet User Summit 2018 (Part 3)
CTF on a Budget - Magnet User Summit 2018 (Part 2)
CTF on a Budget - Magnet User Summit 2018 (Part 1)

 Magnet Virtual Summit (7)

Magnet Virtual Summit 2024 CTF - Android
Magnet Virtual Summit 2024 CTF - iOS
Magnet Virtual Summit 2024 CTF - Cipher
Magnet Virtual Summit 2023 CTF - iOS 16 iPhone
Magnet Virtual Summit 2023 CTF - Windows Server
Magnet Virtual Summit 2023 CTF - Cipher
Magnet Virtual Summit 2023 CTF - Windows 11

 March 2022 (1)

Belkasoft CTF - March 2022

 Marsha (5)

Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Marsha's PC
Cellebrite CTF 2021 - Marsha's Backup
Cellebrite CTF 2021 - Marsha's PC
Cellebrite CTF 2021 - Marsha's iPhone

 Mastodon (2)

Thawing the Ice Age Pt. 2 - Tusky on Android
Thawing the Ice Age - Mastodon on Android

 Media History (1)

Chrome Media History Tracking Your Viewing Habits

 MemProcFS (2)

Magnet Weekly CTF (Week 12) - Warren's Final Memory
Magnet Weekly CTF (Week 9) - Warren's Memory

 Motion Photos (1)

Magnet Weekly CTF (Week 3) - Motion Photos

 Mozilla (3)

Firefox on Android - Cookies, Permissions & Form History
Firefox on Android - Downloads, Top Sites & Recently Closed Tabs
Firefox on Android - Web History, Visits, Bookmarks & Search Terms

 NahamCon (1)

NahamCon CTF 2023 - Forensics

 Network Action Predictor (1)

Chrome Network Action Predictor, Preloading all your Webpages

 Network Miner (2)

BloomCON 0x05 Networks CTF - Exfiltration Investigation (Challenge 2)
BloomCon 0x05 Networks CTF - Who Am I? (Challenge 1)

 Networks (2)

BloomCON 0x05 Networks CTF - Exfiltration Investigation (Challenge 2)
BloomCon 0x05 Networks CTF - Who Am I? (Challenge 1)

 NotePad++ (4)

Magnet User Summit 2022 CTF - Linux
Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Beth's iPhone
Cellebrite CTF 2022 - Heisenberg's Android

 Now Playing (1)

Google Pixel Now Playing History

 PC (1)

Cellebrite CTF 2021 - Marsha's PC

 PECmd (1)

NahamCon CTF 2023 - Forensics

 PHP (1)

Magnet Weekly CTF (Week 8) - PHP Cluster

 Passware (1)

BloomCON 0x05 Networks CTF - Exfiltration Investigation (Challenge 2)

 Permissions (1)

Firefox on Android - Cookies, Permissions & Form History

 Phil Cobley (1)

Chewing the FAT Podcast - Finding Flags and Pulling Pints

 Physical Analyzer (3)

Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Beth's iPhone
Cellebrite CTF 2022 - Heisenberg's Android

 Pixel (4)

Turbo Pt. 3 - Device Health Services Application Usage
Turbo Strikes Again - Tracking Bluetooth Device Battery
Charging Battery with Turbo DB
Google Pixel Now Playing History

 Power Off Reset (1)

Samsung Power Off Reset Logs

 RLEAPP (2)

It's All About Semantics, Location History That Is
Check Marks the Spot - Google Tasks from Takeout

 Recently Closed Tabs (1)

Firefox on Android - Downloads, Top Sites & Recently Closed Tabs

 Registry Explorer (1)

BloomCon 0x05 Forensics CTF

 SANS (3)

SANS DFIR Summit 2023 Recap
Getting GASF'ed with GIAC
My First SANS DFIR Summit Experience

 SQLiteWalker (1)

Introducing SQLiteWalker

 SRUM DUMP (1)

10 Free Forensic Tools I Can't Live Without

 Samsung (2)

Samsung Power Off Reset Logs
Cellebrite CTF 2021 - Heisenberg's Android
Firefox on Android - Web History, Visits, Bookmarks & Search Terms

 Semantic Location History (1)

It's All About Semantics, Location History That Is

 Server (1)

Magnet Virtual Summit 2023 CTF - Windows Server

 Settings Services (1)

Application Battery Usage via Settings Services

 Splitwise (1)

Splitwise on iOS

 Start.Me (1)

StartMe Up (Forensic Edition)

 StartMe (34)

Forensics StartMe Updates (1/1/2025)
Forensics StartMe Updates (12/1/2024)
Forensics StartMe Updates (5/1/2024)
Forensics StartMe Updates (4/1/2024)
Forensics StartMe Updates (3/1/2024)
Forensics StartMe Updates (2/1/2024)
Forensics StartMe Updates (1/1/2024)
Forensics StartMe Updates (12/1/2023)
Forensics StartMe Updates (9/1/2023)
Forensics StartMe Updates (8/1/2023)
Forensics StartMe Updates (7/1/2023)
Forensics StartMe Updates (6/1/2023)
Forensics StartMe Updates (5/1/2023)
Forensics StartMe Updates (4/1/2023)
Forensics StartMe Updates (3/1/2023)
Forensics StartMe Updates (2/1/2023)
Forensics StartMe Updates (1/1/2023)
Forensics StartMe Updates (12/1/2022)
Forensics StartMe Updates (11/1/2022)
Forensics StartMe Updates (10/1/2022)
Forensics StartMe Updates (9/1/2022)
Forensics StartMe Updates (8/1/2022)
Forensics StartMe Updates (6/1/2022)
Forensics StartMe Updates (5/1/2022)
Forensics StartMe Updates (4/1/2022)
Forensics StartMe Updates (3/1/2022)
Forensics StartMe Updates (2/1/2022)
Forensics StartMe Updates (1/1/2022)
Forensics StartMe Updates (11/1/2021)
Forensics StartMe Updates (9/1/2021)
Forensics StartMe Updates (8/1/2021)
Forensics StartMe Updates (7/1/2021)
Forensics StartMe Updates (6/1/2021)
Forensics StartMe Updates (4/1/2021)

 Tech Tuesday (2)

Tech Tuesday: Aukey LC-C6 Wireless Charger
Tech Tuesday: Aukey PB-Y13 Portable Charger

 TeraCopy (4)

Introducing TeraLogger
TeraCopy: A Forensic Analysis (Part 3)
TeraCopy: A Forensic Analysis (Part 2)
TeraCopy: A Forensic Analysis (Part 1)

 TeraLogger (1)

Introducing TeraLogger

 Timeline Explorer (1)

BloomCon 0x05 Forensics CTF

 Top Sites (1)

Firefox on Android - Downloads, Top Sites & Recently Closed Tabs

 Tusky (1)

Thawing the Ice Age Pt. 2 - Tusky on Android

 USB Detective (1)

10 Free Forensic Tools I Can't Live Without

 Unfurl (1)

Magnet User Summit 2022 CTF - iPhone

 Veracrypt (1)

Magnet Weekly CTF - Grand Prize Challenge

 Volatility (4)

Magnet Weekly CTF (Week 12) - Warren's Final Memory
Magnet Weekly CTF (Week 10) - Warren's Memory Redux
Magnet Weekly CTF (Week 9) - Warren's Memory
10 Free Forensic Tools I Can't Live Without

 Web History (1)

Firefox on Android - Web History, Visits, Bookmarks & Search Terms

 Web Visits (1)

Firefox on Android - Web History, Visits, Bookmarks & Search Terms

 Windows (3)

Magnet Virtual Summit 2023 CTF - Windows Server
Cellebrite CTF 2022 - Marsha's PC
Cellebrite CTF 2021 - Marsha's PC

 Windows 11 (1)

Magnet Virtual Summit 2023 CTF - Windows 11

 Windows explorer (1)

Shellbags, Folder Views, and Windows Explorer

 Wireshark (1)

Belkasoft CTF - March 2022

 YouTube (1)

Chewing the FAT Podcast - Finding Flags and Pulling Pints

 ZipWalker (1)

Introducing ZipWalker

 application usage (1)

Turbo Pt. 3 - Device Health Services Application Usage

 audio (1)

Audio and App Usage in Apple Health

 battery (2)

Application Battery Usage via Settings Services
Samsung Power Off Reset Logs

 bluetooth (2)

Android Bluetooth Connection Configuration
Turbo Strikes Again - Tracking Bluetooth Device Battery

 book (1)

Hitchhiker's Guide to DFIR v1 Officially Released!

 books (1)

Flake it till you make it

 bstrings (2)

NahamCon CTF 2023 - Forensics
Magnet Weekly CTF (Week 12) - Warren's Final Memory

 charging (1)

Charging Battery with Turbo DB

 cipher (4)

Magnet Virtual Summit 2024 CTF - Cipher
Magnet User Summit 2023 CTF - Cipher
Magnet Virtual Summit 2023 CTF - Cipher
Magnet Virtual Summit 2021 CTF - Hunt!

 clipboard (1)

Gboard and Clipboard History

 cloud (1)

Magnet Virtual Summit 2021 CTF - Google Takeout

 dcode.fr (2)

Magnet User Summit 2022 CTF - Egg Hunt
Magnet Virtual Summit 2022 CTF - Egg Hunt

 egg hunt (1)

Magnet User Summit 2022 CTF - Egg Hunt

 headphone audio levels (1)

Audio and App Usage in Apple Health

 history (1)

Google Pixel Now Playing History

 hunt (1)

Magnet User Summit 2023 CTF - Cipher

 iLEAPP (5)

Magnet User Summit 2022 CTF - iPhone
Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Beth's iPhone
What's the Buzz - Bumble on iOS
Ain't That a Kik in the Head

 iOS (11)

Splitwise on iOS
Magnet Virtual Summit 2024 CTF - iOS
Analyzing Life360 on iOS
Magnet Virtual Summit 2023 CTF - iOS 16 iPhone
Magnet User Summit 2022 CTF - iPhone
Cellebrite CTF 2022 - Beth's iPhone
What's the Buzz - Bumble on iOS
Restore Log - Tracking iOS Update History
Cellebrite CTF 2021 - Beth's iPhone
Ain't That a Kik in the Head
Google Duo - Android & iOS Forensic Analysis

 iOS 16 (1)

Magnet Virtual Summit 2023 CTF - iOS 16 iPhone

 iPhone (8)

Magnet Virtual Summit 2023 CTF - iOS 16 iPhone
Magnet User Summit 2022 CTF - iPhone
Cellebrite CTF 2022 - Marsha's iPhone
Cellebrite CTF 2022 - Beth's iPhone
Cellebrite CTF 2021 - Marsha's Backup
Cellebrite CTF 2021 - Marsha's iPhone
Cellebrite CTF 2021 - Beth's iPhone
Magnet Virtual Summit 2021 CTF - iPhone

 iTunes backup (1)

Cellebrite CTF 2021 - Marsha's Backup

 memory (5)

Magnet Weekly CTF (Week 12) - Warren's Final Memory
Magnet Weekly CTF (Week 11) - Warren's Memory Part 3
Magnet Weekly CTF (Week 10) - Warren's Memory Redux
Magnet Weekly CTF (Week 9) - Warren's Memory
Magnet Virtual Summit 2020 CTF (Memory)

 msgpack (1)

Cellebrite CTF 2022 - Beth's iPhone

 music (1)

Google Pixel Now Playing History

 nominations (1)

My 2022 Forensic 4Cast Awards Nominations

 plist (1)

Ain't That a Kik in the Head

 podcast (3)

Merry DFIRmas & a Happy New Year
Forensic Happy Hour - Pour Me Another Round
Chewing the FAT Podcast - Finding Flags and Pulling Pints

 power (1)

Charging Battery with Turbo DB

 protobuf (2)

May I Ask Who's Calling - Google Call Screen
Google Pixel Now Playing History

 release (1)

Hitchhiker's Guide to DFIR v1 Officially Released!

 restart (1)

Samsung Power Off Reset Logs

 restore log (1)

Restore Log - Tracking iOS Update History

 scripts (1)

Introducing ZipWalker

 shellbags (1)

Shellbags, Folder Views, and Windows Explorer

 shutdown (1)

Samsung Power Off Reset Logs

 shutdown checkpoints (1)

Shutdown Checkpoints in Android 12

 sqlite (1)

Introducing SQLiteWalker

 system (1)

Shutdown Checkpoints in Android 12

 test (2)

Sample blog post to learn markdown tips
Flake it till you make it

 tools (2)

StartMe Up (Forensic Edition)
10 Free Forensic Tools I Can't Live Without

 training (1)

Cyber5W's CCDFA Certification - A Review

 turbo (3)

Turbo Pt. 3 - Device Health Services Application Usage
Turbo Strikes Again - Tracking Bluetooth Device Battery
Charging Battery with Turbo DB

 turbo.db (1)

Charging Battery with Turbo DB

 update (1)

Restore Log - Tracking iOS Update History

 updates (34)

Forensics StartMe Updates (1/1/2025)
Forensics StartMe Updates (12/1/2024)
Forensics StartMe Updates (5/1/2024)
Forensics StartMe Updates (4/1/2024)
Forensics StartMe Updates (3/1/2024)
Forensics StartMe Updates (2/1/2024)
Forensics StartMe Updates (1/1/2024)
Forensics StartMe Updates (12/1/2023)
Forensics StartMe Updates (9/1/2023)
Forensics StartMe Updates (8/1/2023)
Forensics StartMe Updates (7/1/2023)
Forensics StartMe Updates (6/1/2023)
Forensics StartMe Updates (5/1/2023)
Forensics StartMe Updates (4/1/2023)
Forensics StartMe Updates (3/1/2023)
Forensics StartMe Updates (2/1/2023)
Forensics StartMe Updates (1/1/2023)
Forensics StartMe Updates (12/1/2022)
Forensics StartMe Updates (11/1/2022)
Forensics StartMe Updates (10/1/2022)
Forensics StartMe Updates (9/1/2022)
Forensics StartMe Updates (8/1/2022)
Forensics StartMe Updates (6/1/2022)
Forensics StartMe Updates (5/1/2022)
Forensics StartMe Updates (4/1/2022)
Forensics StartMe Updates (3/1/2022)
Forensics StartMe Updates (2/1/2022)
Forensics StartMe Updates (1/1/2022)
Forensics StartMe Updates (11/1/2021)
Forensics StartMe Updates (9/1/2021)
Forensics StartMe Updates (8/1/2021)
Forensics StartMe Updates (7/1/2021)
Forensics StartMe Updates (6/1/2021)
Forensics StartMe Updates (4/1/2021)