James will explore the local data storage of ‘Snapchat’ for iOS, the implications of the chosen data protection mechanisms that Snapchat have implemented while dissecting the various application databases, exploring how they inter-operate and how the databases are manipulated during execution. This will provide a valuable insight for forensic analysts, allowing for both a further understanding of Snapchat internals and how to detect local data manipulation prior to device filesystem acquisition.