Understanding iOS Time Stamps

Thanks to the wide availability of full file system images for iOS, there have been some great artifact discoveries. But what about the file system itself? While looking at the iOS file system this week with some of my colleagues at Magnet Forensics (Brad de Vlugt, Jamie McQuaid [@reccetech], and Mike Williamson [@forensicmike1]), we discovered … Continued