Tag Archives: apple
FTK 3.2 and cellphones
A little bit of a layoff on the blog due to some crazy class schedules, but hey I am here again at 30,000 feet so what the heck. Lets talk about AccessData’s FTK. I have been messing with AccessData’s new … Continue reading
Posted in Products
Tagged AccessData, apple, cellphone, cellphone forensics, iphone, Lee Reiber, MFI, mobile phone examiner, mobileforensics, MPE+, Reiber, training
4 Comments
Mobile Forensics Inc 303 – Release Notes
Another airblog for you. This time coming from 40,000 feet! Finally a new MFI on-site course! We ran this course in some private venues to seen how it went. To be honest we sorta feel like a band doing a … Continue reading
Posted in Training
Tagged 303, AccessData, apple, Cellebrite, cellphone, cellphone forensics, forensics, FTK, hex dump, iphone, Lee Reiber, MFI303, Mobile Forensics Inc, MPE+, physical analyzer, training
Leave a comment
File 0000000000000001.db? If that’s a file where would you look?
When processing an Apple device, check the files located in /private/var/mobile/Library WebKit/Databases. The Databases.db file is a SQLite Database file that contains a listing of databases. This file can include (https) Google Mail and Yahoo Mail. The corresponding file name … Continue reading
Posted in Rant
Tagged apple, cellphone forensics, files, forensics, iphone, MFI, Mobile Forensics Inc
4 Comments
