Hello again, this one took some time to release, but I hope it helps! iCloud Shared Photo Library (SPL) was introduced during WWDC 2022 as a new feature within iOS 16. Since that time, there have been several articles and how-to videos regarding setting up and using iCloud Shared Photo Library, but I am notContinue reading "iCloud Shared Photo Library: Forensic Artifacts Explained"| The Forensic Scooter
After recently updating the Photos.sqlite queries I thought it might be time for me to build these queries into the great open-source iLEAPP project. I thought this might be a good way to document …| The Forensic Scooter
This update addresses a question regarding the correlation between Shared with You assets and conversation identifiers in the Apple iOS Photos.sqlite ZGENERICALBUM table. Through testing and resear…| The Forensic Scooter
This post provides an update on Local Photo Library (LPL) Photos.sqlite decoding in response to a DFIR Discord community member question. The update covers artifacts related to data transfer betwee…| The Forensic Scooter
Hello everyone! During previous research, I’ve mentioned a few times that my test devices were using the Apple Photos application setting Optimize iPhone Storage in lieu of Download and Keep Origin…| The Forensic Scooter
The Shared with You is a new feature that has been discussed within Apple Worldwide Developers Conference (WWDC) videos and other developer videos. Generally, the comments made indicate that within…| The Forensic Scooter