The text discusses updates to the iLEAPP project, focusing on the integration of Photos.sqlite queries into iLEAPP parsers for iOS versions 15 to 18. It details various parsers designed to extract and analyze photo-related artifacts, including data about basic asset records, albums, shared content, and adjustments made by users. These parsers are essential for forensic analysis of iOS photo data.
Category Archives: Syndication
Update to Shared with You Syndication Media & Conversation Correlation
This update addresses a question regarding the correlation between Shared with You assets and conversation identifiers in the Apple iOS Photos.sqlite ZGENERICALBUM table. Through testing and research, previously overlooked data in the ZASSET and ZGENERICALBUM tables has provided a method of linking these assets to phone numbers or emails. This join applies to both the Local Photo Library and the Shared with You Syndication Photo Library. More details and updated queries are available on GitHub for further analysis.
Shared with You Syndication Photo Library – Message Attachments & Linked Assets
The Shared with You is a new feature that has been discussed within Apple Worldwide Developers Conference (WWDC) videos and other developer videos. Generally, the comments made indicate that within iOS and other Apple Operating Systems this feature will allow a user to easily view and interact with links that have been shared by otherContinue reading “Shared with You Syndication Photo Library – Message Attachments & Linked Assets”
The Forensic Scooter 