Yogesh Khatri's forensic blog swiftforensics.com

New Wifi database from Apple intelligence

swiftforensics.com·68w·swiftforensics.com

mac_apt update to BTM processing

swiftforensics.com·70w·swiftforensics.com

NSKeyedArchive Deserializer update

swiftforensics.com·93w·swiftforensics.com

Reading OneDrive Logs Part 2

swiftforensics.com·184w·swiftforensics.com

Reading OneDrive Logs

swiftforensics.com·222w·swiftforensics.com

Gboard has some interesting data..

swiftforensics.com·279w·swiftforensics.com

iOS Application Groups & Shared data

swiftforensics.com·280w·swiftforensics.com

Introducing ios_apt - iOS Artifact Parsing Tool

swiftforensics.com·280w·swiftforensics.com

KTX to PNG in Python for iOS snapshots

swiftforensics.com·304w·swiftforensics.com

Screentime Notifications in Catalina (10.15)

swiftforensics.com·309w·swiftforensics.com

Parsing unknown protobufs with python

swiftforensics.com·319w·swiftforensics.com

Google Search & Personal Assistant data on android

swiftforensics.com·320w·swiftforensics.com

Usagestats on Android 10 (Q)

swiftforensics.com·331w·swiftforensics.com

macOS 10.15 Volumes & Firmlink magic

swiftforensics.com·341w·swiftforensics.com

Part 3 - ADB keyvalue backups - Wifi and System settings

swiftforensics.com·342w·swiftforensics.com

Part 2 - ADB keyvalue backups - Call Logs

swiftforensics.com·343w·swiftforensics.com

ADB keyvalue backups and the .data format

swiftforensics.com·344w·swiftforensics.com

Making NSKeyedArchives human readable

swiftforensics.com·385w·swiftforensics.com

$Recycle bin and Undo operations

swiftforensics.com·390w·swiftforensics.com

The ._ (dot-underscore) file format

swiftforensics.com·392w·swiftforensics.com

Log in to enable infinite scrolling