Pieces of Eight: iPods, iPads, iPhones, and SQLite
Consumers have gone mad over the iPhone and iPad, so now more than ever, forensic examiners need to understand and be able to acquire, exploit, and report on these devices. This article is about understanding one of the structures used to store data on the iPhone and its siblings: the SQLite database.
Seek and You Shall Find: Using Regular Expressions for Fast, Accurate Mobile Device Data Searches
In the world of digital forensics, the power to seek and find is key. The faster and more accurate the search, the faster you can zero in on your target and find the evidence you need to convict, prevent, or locate. Regular expressions are the key to this power.