w w w . d o u b l e b l a k . c o m

 
Blog Posts
  KnowledgeC (and Friends)
Ian Whiffin - 23rd October 2019
KnowledgeC is a common database in recent iOS Versions that holds a wealth of information. This is far from the first time it's been written about, but it ties in perfectly with some software I've been working on and seemed like a nice article for my first blog.

Click here to read full article
  SnapChat PList
Ian Whiffin - 23rd October 2019
A deconstruction of SnapChat's chatConversationStore.plist file (Hint:It's not a PList).

Click here to read full article
  Apple Pay Transactions
Ian Whiffin - 8th February 2020
Extracting Apple Pay Transactions from an iPhone (and Watch)

Click here to read full article
  So Long Lockdown!
Ian Whiffin - 8th February 2020
The end of Lockdown.log; A quick post to say goodbye.

Click here to read full article
  iOS Mail
Ian Whiffin - 29th March 2020
A dive into the standard email client on iOS devices.

Click here to read full article
  CheckRa1n
Ian Whiffin & Shafik G. Punja - 16th April 2020
A look at extracting iOS devices into a TAR archive using ios_bfu_triage.

Click here to read full article
  Favicons
Ian Whiffin - 7th June 2020
A look at how Favicons may be useful to your investigation.

Click here to read full article
  Locations, Locations, Locations
Ian Whiffin - 18th July 2020
A detailed look at Location data. How it is obtained and how accurate it is.

Click here to read full article
  Harvested Locations
Ian Whiffin - 26th March 2021
EncryptedB.db appears to be a gold mine of location data. But is it really?

Click here to read full article
  Upgrade from NULL
Heather Mahalik & Ian Whiffin - 3rd December 2020
A look at the different clues for determining when a device was wiped

Click here to read full article
  Health Data Types
Ian Whiffin - 1st September 2021
A look at the various Data Types in use within the iOS Health Application.

Click here to read full article
  iOS GeoFences
Ian Whiffin - 23rd October 2021
A look at Consolidated.db (GeoFences) on iOS.

Click here to read full article
  iOS Media Adjustments
Ian Whiffin - 26th October 2021
iOS now allows users to "Adjust" the time and location of recorded media. What affect will that have on forensic examinations?

Click here to read full article
  Message Reactions
Ian Whiffin - 2nd November 2021
An interesting little tidbit about Message Reactions and how it may come in handy.??

Click here to read full article
  The case of the Phantom Device Usage
Ian Whiffin - 12th November 2021
Unmasking the phantom device user...

Click here to read full article
  ArtExtraction
Ian Whiffin - 24th November 2021
Using ArtEx for Live Connection Research

Click here to read full article
  iOS16 iMessages
Ian Whiffin - 8th June 2022
A look at iOS16's new Edit/Unsend iMessage Feature

Click here to read full article
Search Site