-
iPhone Backup Forensics 101
In December last year, I gave a talk at OBTS v7.0 in Maui, HI, talking about iPhone backup forensics. This post is the text version of the technical part of this talk, which can be found on Objective by the Sea’s Youtube account here. Why are we looking at iPhone backups? Often overlooked in favour…
-
AirDrop Forensics 2
✨ Welcome in AirDrop Round 2! ✨ After I published the AirDrop Forensics post my dear friend Mikey got in touch to let me know about other ways of obtaining AirDrop artefacts. Those are looking into the quarantine database and the com.apple.quarantine extended attribute attached to downloaded files, including those transferred using AirDrop. As it turned…
-
AirDrop Forensics
✨ Welcome to AirDrop forensics! ✨ Let’s start with the basics: what is AirDrop? It’s a file-sharing service in macOS and iOS which uses both Bluetooth and WiFi to transfer files from one Apple-made device to another. The nearby devices discovery is done using Bluetooth, then the file transfer itself is completed over WiFi. AirDrop…
-
MacOS Notification Center Forensics
✨ Welcome to the Notification Center rundown! ✨ Today we are going to look at the Notification Center database and find out what forensic information can be dug out of there. First of all, what is the Notification Center? It is a feature which manages notifications from various applications such as web browsers, email clients…
-
USB Forensics
✨ Welcome to the land of USB forensics! ✨ Last time I wrote about the USB basics, documenting my quest to understand and study how USB devices and their hosts communicate. This time let’s dive into USB forensics on Linux and macOS – I want to find out what kind of information can be dug…
-
USB 101
✨ Welcome to my USB 101 guide! ✨ Inspired by a Pluralsight course I completed on USB Forensics fundamentals, I decided to have a crack at explaining the basics myself. Being quite goal-oriented I knew that deciding on a blogpost will help me see through the learning and help with organising the new knowledge in…
-
SteelCon 2019
Hello everyone! In my usual manner, I decided to blog about a conference which took place over a month ago. Let’s pretend this is not because of a major episode of unbearable FOMO I got after seeing my hacker fam having the time of their lives at BSides Manchester earlier this week. Just joking, I…
-
Busy summer
October is slowly fading away and with it any last rays of sunshine in Scotland, so I thought this is a perfect time to summarise my summer and fall. So many things have happened, full of both fun and work… Internship at ZoneFox I’ve completed a 10-week internship at Zonefox, an endpoint monitoring, insider threat…
-
NFC Nail Art Workshop
Please read before starting your nail art adventure! Overall tips Make sure none of the gel nail polish touches your cuticles or finger before you cure it – if it does, it will make it last less time. If you see the polish touching the skin, you can remove excess with the wooden stick provided.…
-
A year in ENUSEC
What. A. Year. Summer 2017 marks a whole year I’ve been part of the ENUSEC committee as Secretary. We’ve had some good fun with Peter, Rob, Scott, Dan and Michal running and participating in various events with our members. We spent countless hours messing around in C27… … went to a bunch of great…
-
Subscribe
Subscribed
Already have a WordPress.com account? Log in now.
Kinga Kieczkowska // #tech #dfir #infosec 