Topic: Mobile

S2:E3 // Considering the keys – exploring the keychain and keystore for what value they hold

By

As the security of our mobile devices grow, so does our trust in their secured storage. More and more individuals are turning to iOS and Android’s key storage systems as a passcode manager, token holder, and even MFA generation tool in some cases. This next episode of Mobile Unpacked will explore the Keychain in iOS and the Keystore in Android and discuss their security settings, what data they hold, and how to use these powerful values to unlock even deeper protections in our forensic investigations.

2024 State of enterprise DFIR report

By

Drawing upon a comprehensive survey of almost 400 corporate DFIR professionals, the fourth annual State of Enterprise Digital Forensics and Incident Response report examines the evolving contributions and experiences of DFIR professionals within corporate environments.

8 Log files you can collect from iOS and Android devices

By

If you tuned in to the 2024 MVS presentation, “Logging La Vida Loca,” or Episode 14 of Mobile Unpacked, then you may be wondering where you can get a cheatsheet or copy of all the locations and types of logging data you can gather in your investigations. Well, look no further than this blog post!

DFIR Lab Automation Made Easier with Magnet Automate

By

Digital forensics labs around the world are recognizing the benefits of automation, helping them to accelerate their investigations, improve investigation quality, and reduce burden on their staff. With Magnet Automate’s Essentials tier, you’ve now got a way to automate your workflows faster, easier, and more cost effectively than ever. 

S2:E2 // Logging la vida loca

By

Most modern electronic devices keep logs running that store information about who, what, when, where, and why processes are performed. Modern smartphones are certainly no different. In fact, certain artifacts can only be recovered by an in-depth review of these logging files.

Magnet Graykey’s Expanding Support for Android Devices – Pixel Series 6 and 8

By

The prominence of Pixel devices is on the rise, with the market share reported to have doubled in the US over the previous year, increasing the likelihood that you will encounter Pixel devices during your investigations. In this session, we will take a closer look at GRAYKEY’s recently announced full access support for the Google Engineered Pixel 6 and 8 series, and the constantly expanding coverage for Android mobile devices and operating systems.

S2:E1 // Unlocking iOS 17’s secrets – exploring the full file system

By

With recent breakthroughs in Magnet GRAYKEY, we now have access to full file system images for iOS 17. This next episode of Mobile Unpacked will explore what these additional areas have given us in comparison to standard quick imaging or logical+ style imaging. Topics will include new/moved voicemail storage and transcriptions, the use of multiple SEGB formats, and more!

How Nashville Metro Police Eliminated Their Mobile Device Backlog & Accelerated Justice with Magnet AUTOMATE

By

Investigators and prosecutors work closely together to protect nearly a million residents in Nashville—and digital evidence can play a crucial role in their cases. But, manually processing an average of three mobile devices for every case made backlogs inevitable, weighing heavily on everyone.
 
Within the first few months of using Magnet AUTOMATE in combination with Magnet AXIOM, Nashville Metro’s Criminal Investigations Division completely eliminated their mobile device backlog and dramatically reduced its time to evidence, now usually delivered within 24 hours
 
Join Metro Nashville’s Chad Gish for a walkthrough of his lab’s automated mobile workflows and see how AUTOMATE has helped him and his team to eliminate their mobile device backlog and accelerate justice.

S1:E12 // Messing around with media: Understand media types in modern smartphones

By

iOS and Android devices are usually a plethora of media data, but what types of media data await an examiner? What is the difference between a HEIC and a JPEG, a PNG and a KTX, ProRes and ProRaw, or even a Live Photo versus a Motion Photo? Which types of media are going to be natively viewable, and which ones will require a special viewer?

Join Chris Vance in this next episode of Mobile Unpacked, where he will explore the different types of media files that are present on both Android and iOS devices including their proprietary formats and what each type of media file can tell us contextually about the data that awaits us.

S1:E11 // Peering into permissions – taking a look at iOS/Android permissions for insights to 3rd party apps

By

Whenever an app ends up on a modern smartphone, it has to first ask for permission from the user for its functions. These permissions can be standard or considered ‘sensitive.’ Join us for this next episode of Mobile Unpacked with Chris Vance to learn how to use this information to track insights about the 3rd party apps installed on a device, what they have done or not done, and whether or not their behavior is malicious.