Vehicle and iPhone Speed Comparison

As I stated in the future considerations section of the original research write-up, I contacted a few vehicle forensics experts and asked if they would like to assist me with some research and testing, they responded “Absolutely.” During a training event, the experts and I conducted a small test. Forensic Question During the test, IContinue reading “Vehicle and iPhone Speed Comparison”

Photos.sqlite Query Documentation & Notable Artifacts

As many of you are aware, I recently updated my Photos.sqlite queries. Since releasing the different query iterations, I have received several questions about how I was able to decode the data included in the queries. That’s a great question! I also noticed several questions being posted to the listservs and DFIR Discord about theContinue reading “Photos.sqlite Query Documentation & Notable Artifacts”

Photos.Sqlite Queries – Update

I would like to start off by saying thank you to everyone who has reached out about the Photos.sqlite queries I previously posted. After chatting with some people who have used the queries, it was suggested that I update the queries to include the following: Restructuring the query output Renaming and clarifying the column namesContinue reading “Photos.Sqlite Queries – Update”

iPhone Device Speeds via Cache.sqlite > ZRTCLLOCATIONMO table

Have you ever wanted to know how fast a vehicle or person was traveling at a particular time? Have you considered acquiring iPhone data to answer that question? The material in this blog will help provide some tools and methods for answering these questions. We know from previously published research that Apples iOS location dataContinue reading “iPhone Device Speeds via Cache.sqlite > ZRTCLLOCATIONMO table”

iOS Location Services and System Services ON or OFF?

Awhile back, I, started working on some research whether the device speed recorded in an iPhone database could be considered reliable evidence for how fast a device was traveling. I was going to discuss some device settings in the blog, but quickly learned the Location Services and System Services settings should be discussed in aContinue reading “iOS Location Services and System Services ON or OFF?”