Hello Everyone,

My name is Scott Koenig. I have been working in law enforcement for more than 15 years. In 2016, I decided it would be a good idea to become a digital forensic examiner. Since that time, I have attended several hours of training and earned several levels of certifications, but nothing has taught me more than the research I have personally performed. I started this website as a place that I can publish and manage some of the research that I have worked on.

When I started my law enforcement career, I never thought I would be creating a website or writing blogs about the things that I have learned. I would like to give a special thanks to Heather Mahalik for her consent persistence and motivation to post and share with the community. I was very humbled when she offered to post my first write up on her blog,, which was eventually reviewed and accepted by DFIR Review,

I hope the information found on this website will help you with your digital forensic adventures. If you have any questions about the information found on this website, please feel free to contact me via any of the following methods:




One thought on “Introduction

  1. Hey Scott. Thank you for your write-up on May 2 2022 on photos.sqlite. I have been working to better understand how iOS manages media on extractions, especially partial file-system extraction, and your research helped me immensely. Huge shout out from Edmonton Police Service in Canada.

    Liked by 1 person

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

%d bloggers like this: