The blog discusses iCloud Shared Photo Library (SPL), introduced in iOS 16, highlighting its forensic implications. It covers how to determine SPL activity using Local Photo Library data and identifies key property lists and databases. Additionally, it offers insights into media sharing dynamics among participants and suggests tools for analysis.
Tag Archives: iOS Settings
Do you have a Full-Sized Asset…or just a Thumbnail? Did Optimized iPhone Storage process occur?
Hello everyone! During previous research, I’ve mentioned a few times that my test devices were using the Apple Photos application setting Optimize iPhone Storage in lieu of Download and Keep Originals setting. I’ve used this setting in the past because most devices I’ve encountered are using this setting. I’ve always had a curiosity about theContinue reading “Do you have a Full-Sized Asset…or just a Thumbnail? Did Optimized iPhone Storage process occur?”
iOS Settings Display Auto-Lock & Require Passcode
Forensic Question: A classmate of mine contacted me and posed a question, “Where in an iPhone extraction is the Display Auto-Lock setting stored?” Thanks, Tyler Wuestenhagen, for posing the question and getting me thinking. I did a little research, like reviewing the SANS FOR585 poster and class notes, but could not find the easy answer.Continue reading “iOS Settings Display Auto-Lock & Require Passcode”
The Forensic Scooter 