The Forensic Scooter
This blog was started by Scott Koenig as a place to post and manage some of his digital forensic research.
This is a personal blog. Any views or opinions represented in this blog are personal and belong solely to the blog owner and do not represent those of people, institutions, or organizations that the owner may or may not be associated with in professional or personal capacity, unless explicitly stated.
Additional resources can be found on his GitHub.
Latest from the Blog
Hello everyone! Back in August 2020, I wrote a blog “Using Photos.Sqlite to show the relationships between photos and the application they were created with?” which was posted on Heather Mahaliks’ blog, https://smarterforensics.com/. The writeup was eventually sent to DFIR Review (https://dfir.pubpub.org/pub/v19rksyf/release/1) and published on their website. This is a follow-up to the aforementioned blogContinue reading “Photos.Sqlite Queries”
Cell phone use is routine. Our cell phones are really an extension of ourselves. We carry them around to not only make calls and messages, but they are also our daily planners, to do lists and entertainment resources. We use them at all times of the day – the alarms in the morning, email, andContinue reading “iOS KnowledgeC.db Notifications”
Have you ever wanted to know how fast a vehicle or person was traveling at a particular time? Have you considered acquiring iPhone data to answer that question? The material in this blog will help to provide some tools and methods for answering these questions. We know from previously published research that Apples iOS CoreContinue reading “iPhone Device Speeds via Cache.sqlite > ZRTCLLOCATIONMO table”
Get new content delivered directly to your inbox.