In this first webinar in our Mobile Unpacked With Chris Vance series, Chris will address some of the main challenges that examiners are faced with in mobile forensics, as well as lay out a new way of addressing these challenges. He will also cover what can (and cannot) be extracted from each typical protocol used … Continued
Did some of your favorite data go missing in iOS 16? Events missing from your timeline? With iOS 16’s deeper adoption of the biome directory and the ‘SEGB’ file format found within, much of this information has found a new home. This Mobile Unpacked with Chris Vance episode will more deeply explore the SEGB file … Continued
Public evidence submission portals are a game changer for frontline police officers and investigators. Officers and detectives no longer need to deal with the challenge of obtaining individual video files from cellphones or other digital devices, only to face the additional challenges of storing and sharing video evidence. Citizens can now receive a link from … Continued
Magnet Forensics offers a variety of free digital forensics tools designed to assist in many aspects of digital forensics and incident response (DFIR).
Earlier this month, I reached out to my friend Valentina and told her I wanted to learn about macOS/iOS exploitation, so she recommended taking a look at the CVE-2021-30860 vulnerability, also known as FORCEDENTRY, and the prior work her friend Jeffrey Hofmann posted on Twitter.
How large was the last case you worked and how much data were you dealing with? I get a bit sentimental thinking back to some of the earlier days of my digital forensics casework. The good old days when a normal case consisted of a single desktop computer with maybe a few gigabytes of storage capacity—on the high end.
2022 was a big year for Magnet AXIOM. From improvements to Magnet.AI to the much adored (and long awaited) Dark Mode, Magnet AXIOM has transformed quite a bit over the past 12 months. While there are too many new features to fit in one post, we’ve rounded up a few of our favorite improvements to AXIOM in 2022.
Magnet AXIOM 6.9: Updated LevelDB Viewer, Improvements to Apple Warrant Returns, & Automatic Loading of iOS Keychain Data
As examiners, we are used to finding data within database files. These have often been SQLite databases which we have been examined ad nauseum to carve out every bit of data we can find.
MF: Tell us about your life before becoming a Trainer.
ML: Prior to becoming a trainer, I worked as a digital forensic investigator within law enforcement. I worked on a wide variety of cases including fraud, large scale drug operations, murder, and child sexual offences. After my time in law enforcement, I became a university lecturer, specialising in mobile forensics and cyber security.
