Forensics StartMe Updates (9/1/2025)
Shortlink: startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app formerl...| www.stark4n6.com
Shortlink: startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app formerl...| www.stark4n6.com
Shortlink: startme.stark4n6.com QR Code: If people have suggestions for additions please feel free to shoot me a message on the app formerl...| www.stark4n6.com
Here's another quick script made out of partial necessity. DirListHash is a simple Python script that takes a folder as input and traverses the folder and subfolders and files and creates a listing of all items with some metadata such as path, size, MAC timestamps.| Stark 4N6
I came across a short research paper that was recently published on ResearchGate from Ruud Schramp of the Netherlands Forensic Institute. ...| www.stark4n6.com
Vibe coding is all the rage these days so when I had a need recently for some help I took to Gemini to hammer away at some prompts. What sta...| www.stark4n6.com
Shortlink: startme.stark4n6.com| Stark 4N6
Last week I had the pleasure of attending the Techno Security conference down in Wilmington, NC for the first time (and maybe the last time? More on that later). It was also the first conference I've been to in almost 2 years so I was excited to check out a conference I've been meaning to hit for years and years.| Stark 4N6
Shortlink: startme.stark4n6.com| Stark 4N6
In my ongoing hunting for new(ish) research to blog about I recently came across a database on iOS that I couldn't find much info on in the wider community. As briefly touched on from Mattia (read his blog here) the storeUser.db contains details on app installs and purchases from the app store. From the full file system extraction the database lives at path:| Stark 4N6
Shortlink: startme.stark4n6.com| Stark 4N6
Evidence Link: takeout-20241214T082121Z-001.zip| Stark 4N6
Evidence Link: takeout-20241129T224833Z-001.zip| Stark 4N6
Evidence Link: image4.tgz| Stark 4N6
Knock Knock - 10 points| Stark 4N6
Evidence Link: 00008110-0008196A2299401E_files_full.zip| Stark 4N6
Evidence Link: UserB2.7z| Stark 4N6
Apple Health has been expanding in scope for years now, What started as just tracking workouts it now has features including heart, medications, mental wellbeing, respiratory, sleep, audio levels and so much more.| Stark 4N6
Evidence Link: userbss.ad1| Stark 4N6
Shortlink: startme.stark4n6.com| Stark 4N6
Shortlink: startme.stark4n6.com| Stark 4N6
We're less than 2 weeks away from another year of the Magnet capture the flag competition, which also means yet another CTF workshop with Jessica and I.| Stark 4N6
Shortlink: startme.stark4n6.com| Stark 4N6
I hope everyone is having a nice holiday season and winding down the year without any issues. I'm taking this time to say I'm thankful for all the opportunities that 2024 provided both in my career and in my personal life. It's been a rollercoaster but what a ride it's been.| Stark 4N6
Shortlink: startme.stark4n6.com| Stark 4N6
It's been quiet around these parts so it was time for something new. Introducing my latest little script ZipWalker. Similar to the SQLiteWalker I had a need to fill and made it into something potentially more useful for others.| Stark 4N6
Cipher | Android Part two is upon us, here I'll be going through the iOS section. Evidence: 00008110-000925383620A01E_files_full.zip Why a...| www.stark4n6.com
One of the useful features Chrome has had for a long is text prediction. When you start to search for something Google attempts to predict w...| www.stark4n6.com
