Hello again, this one took some time to release, but I hope it helps! iCloud Shared Photo Library (SPL) was introduced during WWDC 2022 as a new feature within iOS 16. Since that time, there have been several articles and how-to videos regarding setting up and using iCloud Shared Photo Library, but I am notContinue reading "iCloud Shared Photo Library: Forensic Artifacts Explained"| The Forensic Scooter
As many of you are aware, I recently updated my Photos.sqlite queries. Since releasing the different query iterations, I have received several questions about how I was able to decode the data incl…| The Forensic Scooter
After recently updating the Photos.sqlite queries I thought it might be time for me to build these queries into the great open-source iLEAPP project. I thought this might be a good way to document …| The Forensic Scooter
This update addresses a question regarding the correlation between Shared with You assets and conversation identifiers in the Apple iOS Photos.sqlite ZGENERICALBUM table. Through testing and resear…| The Forensic Scooter
This post provides an update on Local Photo Library (LPL) Photos.sqlite decoding in response to a DFIR Discord community member question. The update covers artifacts related to data transfer betwee…| The Forensic Scooter
Hello everyone! During previous research, I’ve mentioned a few times that my test devices were using the Apple Photos application setting Optimize iPhone Storage in lieu of Download and Keep Origin…| The Forensic Scooter
Part B Filling a device internal storage for Optimize iPhone Storage testing If you are reading this portion of the write-up about iCloud Photos and Optimize iPhone Storage, congratulations you hav…| The Forensic Scooter
This reference guide was built as a part of some research and testing I performed looking into the Photos.sqlite ZINTERNALRESOURCE table. During the research, I was able to interpret most of the va…| The Forensic Scooter
The Shared with You is a new feature that has been discussed within Apple Worldwide Developers Conference (WWDC) videos and other developer videos. Generally, the comments made indicate that within…| The Forensic Scooter
Hello again! There has been a lot of discussion and curiosity about the recent news that iOS 16 will have an enhanced Hidden assets feature. According to the press releases, this feature will allow…| The Forensic Scooter
As I stated in the future considerations section of the original research write-up, I contacted a few vehicle forensics experts and asked if they would like to assist me with some research and test…| The Forensic Scooter
