The blog discusses iCloud Shared Photo Library (SPL), introduced in iOS 16, highlighting its forensic implications. It covers how to determine SPL activity using Local Photo Library data and identifies key property lists and databases. Additionally, it offers insights into media sharing dynamics among participants and suggests tools for analysis.
Tag Archives: iLEAPP
iLEAPP Parsers & Photos.sqlite Queries
The text discusses updates to the iLEAPP project, focusing on the integration of Photos.sqlite queries into iLEAPP parsers for iOS versions 15 to 18. It details various parsers designed to extract and analyze photo-related artifacts, including data about basic asset records, albums, shared content, and adjustments made by users. These parsers are essential for forensic analysis of iOS photo data.
The Forensic Scooter 