René's URL Explorer Experiment


Title: GitHub - RealityNet/iOS-Forensics-References: A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file · GitHub

Open Graph Title: GitHub - RealityNet/iOS-Forensics-References: A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file

X Title: GitHub - RealityNet/iOS-Forensics-References: A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file

Description: A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file - RealityNet/iOS-Forensics-References

Open Graph Description: A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file - RealityNet/iOS-Forensi...

X Description: A curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file - RealityNet/iOS-Forensi...

Opengraph URL: https://github.com/RealityNet/iOS-Forensics-References

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository
route-controllerfiles
route-actiondisambiguate
fetch-noncev2:cbe19a8e-a515-343b-7fc2-95dace009e64
current-catalog-service-hashf3abb0cc802f3d7b95fc8762b94bdcb13bf39634c40c357301c4aa1d67a256fb
request-idDC38:1B4DEF:11D352B:18148BD:6A4C6FA2
html-safe-nonce143b4829e5e58aede326202b4b257c73bb574ebb031d3c8e5ddc55d0a0bb7947
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJEQzM4OjFCNERFRjoxMUQzNTJCOjE4MTQ4QkQ6NkE0QzZGQTIiLCJ2aXNpdG9yX2lkIjoiODM0NDk5MzM5OTE2NjQ5NjY3NCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac1d315396f841efb81de245f17c061cdb64060af7bd6c6a21b38c9b6cd3572cbf
hovercard-subject-tagrepository:627820495
github-keyboard-shortcutsrepository,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location//
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/RealityNet/iOS-Forensics-References
twitter:imagehttps://opengraph.githubassets.com/8ec963ad1949d419225adb11d048e9e3af0c754f8599784f688751aed4c9b0b1/RealityNet/iOS-Forensics-References
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/8ec963ad1949d419225adb11d048e9e3af0c754f8599784f688751aed4c9b0b1/RealityNet/iOS-Forensics-References
og:image:altA curated list of iOS Forensics References, organized by folder with specific references (links to blog post, research paper, articles, and so on) for each interesting file - RealityNet/iOS-Forensi...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-cache
go-importgithub.com/RealityNet/iOS-Forensics-References git https://github.com/RealityNet/iOS-Forensics-References.git
octolytics-dimension-user_id16462377
octolytics-dimension-user_loginRealityNet
octolytics-dimension-repository_id627820495
octolytics-dimension-repository_nwoRealityNet/iOS-Forensics-References
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id627820495
octolytics-dimension-repository_network_root_nwoRealityNet/iOS-Forensics-References
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release14099438da5379150f15a2892474c7c7e6c0e55e
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/RealityNet/iOS-Forensics-References#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRealityNet%2FiOS-Forensics-References
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2FRealityNet%2FiOS-Forensics-References
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E&source=header-repo&source_repo=RealityNet%2FiOS-Forensics-References
Reloadhttps://github.com/RealityNet/iOS-Forensics-References
Reloadhttps://github.com/RealityNet/iOS-Forensics-References
Reloadhttps://github.com/RealityNet/iOS-Forensics-References
Please reload this pagehttps://github.com/RealityNet/iOS-Forensics-References
RealityNet https://github.com/RealityNet
iOS-Forensics-Referenceshttps://github.com/RealityNet/iOS-Forensics-References
Notifications https://github.com/login?return_to=%2FRealityNet%2FiOS-Forensics-References
Fork 30 https://github.com/login?return_to=%2FRealityNet%2FiOS-Forensics-References
Star 233 https://github.com/login?return_to=%2FRealityNet%2FiOS-Forensics-References
Code https://github.com/RealityNet/iOS-Forensics-References
Issues 1 https://github.com/RealityNet/iOS-Forensics-References/issues
Pull requests 1 https://github.com/RealityNet/iOS-Forensics-References/pulls
Actions https://github.com/RealityNet/iOS-Forensics-References/actions
Projects https://github.com/RealityNet/iOS-Forensics-References/projects
Security and quality 0 https://github.com/RealityNet/iOS-Forensics-References/security
Insights https://github.com/RealityNet/iOS-Forensics-References/pulse
Code https://github.com/RealityNet/iOS-Forensics-References
Issues https://github.com/RealityNet/iOS-Forensics-References/issues
Pull requests https://github.com/RealityNet/iOS-Forensics-References/pulls
Actions https://github.com/RealityNet/iOS-Forensics-References/actions
Projects https://github.com/RealityNet/iOS-Forensics-References/projects
Security and quality https://github.com/RealityNet/iOS-Forensics-References/security
Insights https://github.com/RealityNet/iOS-Forensics-References/pulse
https://github.com/RealityNet/iOS-Forensics-References
Brancheshttps://github.com/RealityNet/iOS-Forensics-References/branches
Tagshttps://github.com/RealityNet/iOS-Forensics-References/tags
https://github.com/RealityNet/iOS-Forensics-References/branches
https://github.com/RealityNet/iOS-Forensics-References/tags
154 Commitshttps://github.com/RealityNet/iOS-Forensics-References/commits/main/
https://github.com/RealityNet/iOS-Forensics-References/commits/main/
README.mdhttps://github.com/RealityNet/iOS-Forensics-References/blob/main/README.md
README.mdhttps://github.com/RealityNet/iOS-Forensics-References/blob/main/README.md
READMEhttps://github.com/RealityNet/iOS-Forensics-References
https://github.com/RealityNet/iOS-Forensics-References#ios-forensics-references
https://github.com/RealityNet/iOS-Forensics-References#data-partition-privatevar
https://github.com/RealityNet/iOS-Forensics-References#fseventsd-folder
http://www.osdfcon.org/presentations/2017/Ibrahim-Understanding-MacOS-File-Ststem-Events-with-FSEvents-Parser.pdfhttp://www.osdfcon.org/presentations/2017/Ibrahim-Understanding-MacOS-File-Ststem-Events-with-FSEvents-Parser.pdf
https://papers.put.as/papers/macosx/2017/summit_archive_1498158287.pdfhttps://papers.put.as/papers/macosx/2017/summit_archive_1498158287.pdf
https://github.com/dlcowen/FSEventsParserhttps://github.com/dlcowen/FSEventsParser
https://github.com/RealityNet/iOS-Forensics-References#containers-folder
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
http://www.mac4n6.com/blog/2018/12/16/on-the-third-day-of-apollo-my-true-love-gave-to-me-application-usage-to-determine-who-has-been-naughty-or-nicehttp://www.mac4n6.com/blog/2018/12/16/on-the-third-day-of-apollo-my-true-love-gave-to-me-application-usage-to-determine-who-has-been-naughty-or-nice
http://www.mac4n6.com/blog/2018/12/17/on-the-fourth-day-of-apollo-my-true-love-gave-to-me-media-analysis-to-prove-you-listened-to-all-i-want-for-christmas-is-you-over-and-over-since-before-thanksgivinghttp://www.mac4n6.com/blog/2018/12/17/on-the-fourth-day-of-apollo-my-true-love-gave-to-me-media-analysis-to-prove-you-listened-to-all-i-want-for-christmas-is-you-over-and-over-since-before-thanksgiving
http://www.mac4n6.com/blog/2018/12/19/on-the-sixth-day-of-apollo-my-true-love-gave-to-me-blinky-things-with-buttons-device-status-analysishttp://www.mac4n6.com/blog/2018/12/19/on-the-sixth-day-of-apollo-my-true-love-gave-to-me-blinky-things-with-buttons-device-status-analysis
http://www.mac4n6.com/blog/2018/12/20/on-the-seventh-day-of-apollo-my-true-love-gave-to-me-a-good-conversation-analysis-of-communications-and-data-usagehttp://www.mac4n6.com/blog/2018/12/20/on-the-seventh-day-of-apollo-my-true-love-gave-to-me-a-good-conversation-analysis-of-communications-and-data-usage
http://www.mac4n6.com/blog/2018/12/21/on-the-eighth-day-of-apollo-my-true-love-gave-to-me-a-glorious-lightshow-analysis-of-device-connectionshttp://www.mac4n6.com/blog/2018/12/21/on-the-eighth-day-of-apollo-my-true-love-gave-to-me-a-glorious-lightshow-analysis-of-device-connections
http://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysishttp://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysis
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_accessory_connection.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_accessory_connection.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_airdrop.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_airdrop.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_audio.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_audio.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_deletion.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_deletion.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_info.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_info.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_nowplaying.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_nowplaying.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_usage_by_hour.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_app_usage_by_hour.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_assertion.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_assertion.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_audio_routing.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_audio_routing.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_awdl_states.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_awdl_states.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_backcamera_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_backcamera_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_backlight_brightness.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_backlight_brightness.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_battery_level.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_battery_level.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_battery_level_ui.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_battery_level_ui.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_bluetooth_device_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_bluetooth_device_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_button_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_button_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_camera_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_camera_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_coalition_interval.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_coalition_interval.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_lock_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_lock_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_screen_autolock.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_screen_autolock.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_telephony_activity.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_telephony_activity.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_telephony_registration.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_telephony_registration.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_volume.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_device_volume.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_display.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_display.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_display_brightness.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_display_brightness.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_frontcamera_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_frontcamera_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_ids_messages.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_ids_messages.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_incallservice.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_incallservice.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_kernel_task_monitor.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_kernel_task_monitor.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_lightning_connector_status.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_lightning_connector_status.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_lightnining_connector_status.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_lightnining_connector_status.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_location_client_status.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_location_client_status.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_location_tech_status.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_location_tech_status.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_mobilebackup.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_mobilebackup.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_network_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_network_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_paired_device_config.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_paired_device_config.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_power_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_power_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_powernap.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_powernap.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_process_data_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_process_data_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_process_id.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_process_id.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_process_monitor_dynamic.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_process_monitor_dynamic.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_push_message_received.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_push_message_received.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_rapport_received_message.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_rapport_received_message.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_springboard_aggregate_bulletins.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_springboard_aggregate_bulletins.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_springboard_aggregate_notifications.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_springboard_aggregate_notifications.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_timezone.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_timezone.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_torch_state.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_torch_state.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video_cmfile.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video_cmfile.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video_cmhls.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video_cmhls.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video_vtsession.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_video_vtsession.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_wallet_card.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_wallet_card.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_wallet_transaction.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_wallet_transaction.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_wifi_properties.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/powerlog_wifi_properties.txt
https://www.forensicfocus.com/webinars/time-well-spent-precision-timing-monotonic-clocks-and-the-powerlogs-database-for-ios/https://www.forensicfocus.com/webinars/time-well-spent-precision-timing-monotonic-clocks-and-the-powerlogs-database-for-ios/
https://blog.digital-forensics.it/2021/05/oh-no-i-have-wiped-iphone-now-what.htmlhttps://blog.digital-forensics.it/2021/05/oh-no-i-have-wiped-iphone-now-what.html
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://bitsplease4n6.wordpress.com/2020/12/17/bluetooth-ios/https://bitsplease4n6.wordpress.com/2020/12/17/bluetooth-ios/
https://dfir.pubpub.org/pub/frknihlg/release/1https://dfir.pubpub.org/pub/frknihlg/release/1
https://cellebrite.com/en/how-to-use-ios-bluetooth-connections-to-solve-crimes-faster/https://cellebrite.com/en/how-to-use-ios-bluetooth-connections-to-solve-crimes-faster/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetooth.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetooth.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://bitsplease4n6.wordpress.com/2020/12/17/bluetooth-ios/https://bitsplease4n6.wordpress.com/2020/12/17/bluetooth-ios/
https://dfir.pubpub.org/pub/frknihlg/release/1https://dfir.pubpub.org/pub/frknihlg/release/1
https://cellebrite.com/en/how-to-use-ios-bluetooth-connections-to-solve-crimes-faster/https://cellebrite.com/en/how-to-use-ios-bluetooth-connections-to-solve-crimes-faster/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetooth.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetooth.py
https://smarterforensics.com/wp-content/uploads/2014/06/The-Cider-Press-DFIR_Summit2017.pdfhttps://smarterforensics.com/wp-content/uploads/2014/06/The-Cider-Press-DFIR_Summit2017.pdf
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://bitsplease4n6.wordpress.com/2020/12/17/bluetooth-ios/https://bitsplease4n6.wordpress.com/2020/12/17/bluetooth-ios/
https://dfir.pubpub.org/pub/frknihlg/release/1https://dfir.pubpub.org/pub/frknihlg/release/1
https://cellebrite.com/en/how-to-use-ios-bluetooth-connections-to-solve-crimes-faster/https://cellebrite.com/en/how-to-use-ios-bluetooth-connections-to-solve-crimes-faster/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetooth.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/bluetooth.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://github.com/RealityNet/iOS-Forensics-References#db-folder
https://blog.d204n6.com/2022/09/ios-16-now-you-c-it-now-you-dont.htmlhttps://blog.d204n6.com/2022/09/ios-16-now-you-c-it-now-you-dont.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-2.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-2.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-4.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-4.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-5-hey.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-5-hey.html
https://www.magnetforensics.com/blog/bringing-it-back-with-biome-data/https://www.magnetforensics.com/blog/bringing-it-back-with-biome-data/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeAppinstall.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeAppinstall.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBacklight.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBacklight.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBattperc.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBattperc.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBluetooth.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBluetooth.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeCarplayisconnected.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeCarplayisconnected.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeDevplugin.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeDevplugin.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeHardware.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeHardware.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeInfocus.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeInfocus.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeIntents.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeIntents.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeLocationactivity.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeLocationactivity.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotes.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotes.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotificationsPub.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotificationsPub.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNowplaying.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNowplaying.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSafari.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSafari.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSync.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSync.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeTextinputses.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeTextinputses.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeUseractmeta.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeUseractmeta.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeWifi.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeWifi.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/dhcphp.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/dhcphp.py
https://github.com/ydkhatri/mac_apt/wiki/NETWORKINGhttps://github.com/ydkhatri/mac_apt/wiki/NETWORKING
https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/
https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/dhcpl.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/dhcpl.py
https://github.com/libyal/dtformats/blob/main/documentation/Apple%20Unified%20Logging%20and%20Activity%20Tracing%20formats.asciidochttps://github.com/libyal/dtformats/blob/main/documentation/Apple%20Unified%20Logging%20and%20Activity%20Tracing%20formats.asciidoc
https://eclecticlight.co/2017/09/25/browsing-the-unified-log-in-difficult-circumstances/https://eclecticlight.co/2017/09/25/browsing-the-unified-log-in-difficult-circumstances/
https://www.mandiant.com/resources/blog/reviewing-macos-unified-logshttps://www.mandiant.com/resources/blog/reviewing-macos-unified-logs
https://www.crowdstrike.com/blog/how-to-leverage-apple-unified-log-for-incident-response/https://www.crowdstrike.com/blog/how-to-leverage-apple-unified-log-for-incident-response/
https://objectivebythesea.org/v3/talks/OBTS_v3_jMusunuri_eMartin.pdfhttps://objectivebythesea.org/v3/talks/OBTS_v3_jMusunuri_eMartin.pdf
https://github.com/ydkhatri/UnifiedLogReaderhttps://github.com/ydkhatri/UnifiedLogReader
https://dfir.pubpub.org/pub/6i7d593n/release/1https://dfir.pubpub.org/pub/6i7d593n/release/1
https://github.com/mac4n6/Presentations/blob/master/Logs%20Unite!%20-%20Forensic%20Analysis%20of%20Apple%20Unified%20Logs/LogsUnite.pdfhttps://github.com/mac4n6/Presentations/blob/master/Logs%20Unite!%20-%20Forensic%20Analysis%20of%20Apple%20Unified%20Logs/LogsUnite.pdf
https://www.mac4n6.com/blog/2020/4/19/introducing-analysis-of-apple-unified-logs-quarantine-edition-entry-0https://www.mac4n6.com/blog/2020/4/19/introducing-analysis-of-apple-unified-logs-quarantine-edition-entry-0
https://github.com/RealityNet/iOS-Forensics-References#installd-folder
https://www.netscylla.com/blog/2022/06/09/Cyberdefenders-Jailbreak-CTF.htmlhttps://www.netscylla.com/blog/2022/06/09/Cyberdefenders-Jailbreak-CTF.html
https://dfir.pubpub.org/pub/e5xlbw88/release/2https://dfir.pubpub.org/pub/e5xlbw88/release/2
https://dfrws.org/wp-content/uploads/2019/10/2019_review-ios_mobile_installation_logs.pdfhttps://dfrws.org/wp-content/uploads/2019/10/2019_review-ios_mobile_installation_logs.pdf
https://abrignoni.blogspot.com/2019/01/ios-mobile-installation-logs-parser.htmlhttps://abrignoni.blogspot.com/2019/01/ios-mobile-installation-logs-parser.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mobileInstall.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mobileInstall.py
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/lastBuild.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/lastBuild.py
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://github.com/RealityNet/iOS-Forensics-References#logs-folder
http://www.doubleblak.com/m/blogPosts.php?id=9http://www.doubleblak.com/m/blogPosts.php?id=9
http://www.doubleblak.com/m/blogPosts.php?id=2http://www.doubleblak.com/m/blogPosts.php?id=2
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://github.com/RealityNet/iOS-Forensics-References#mobilecontainers-folder
https://www.systoolsgroup.com/forensics/sqlite/ios.htmlhttps://www.systoolsgroup.com/forensics/sqlite/ios.html
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.doubleblak.com/m/blogPosts.php?id=13https://www.doubleblak.com/m/blogPosts.php?id=13
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariFavicons.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariFavicons.py
https://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.htmlhttps://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariRecentWebSearches.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariRecentWebSearches.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.d204n6.com/2021/05/ios-macos-tracking-downloads-from.htmlhttps://blog.d204n6.com/2021/05/ios-macos-tracking-downloads-from.html
http://az4n6.blogspot.com/2014/07/safari-and-iphone-internet-history.htmlhttp://az4n6.blogspot.com/2014/07/safari-and-iphone-internet-history.html
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.mdpi.com/2076-3417/12/21/11180https://www.mdpi.com/2076-3417/12/21/11180
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
http://www.mac4n6.com/blog/2019/9/27/just-call-me-buffy-the-proto-slayer-an-initial-look-into-protobuf-data-in-mac-and-ios-forensicshttp://www.mac4n6.com/blog/2019/9/27/just-call-me-buffy-the-proto-slayer-an-initial-look-into-protobuf-data-in-mac-and-ios-forensics
https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/
https://smarterforensics.com/2016/12/how-the-grinch-stole-apple-maps-artifacts-or-did-he-just-hide-them/https://smarterforensics.com/2016/12/how-the-grinch-stole-apple-maps-artifacts-or-did-he-just-hide-them/
https://smarterforensics.com/2018/03/first-the-grinch-and-now-the-easter-bunny-where-is-apple-maps-hiding/https://smarterforensics.com/2018/03/first-the-grinch-and-now-the-easter-bunny-where-is-apple-maps-hiding/
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://commons.erau.edu/cgi/viewcontent.cgi?article=1414&context=jdfslhttps://commons.erau.edu/cgi/viewcontent.cgi?article=1414&context=jdfsl
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://smarterforensics.com/2016/12/how-the-grinch-stole-apple-maps-artifacts-or-did-he-just-hide-them/https://smarterforensics.com/2016/12/how-the-grinch-stole-apple-maps-artifacts-or-did-he-just-hide-them/
https://smarterforensics.com/2018/03/first-the-grinch-and-now-the-easter-bunny-where-is-apple-maps-hiding/https://smarterforensics.com/2018/03/first-the-grinch-and-now-the-easter-bunny-where-is-apple-maps-hiding/
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://lordtemplar1.wordpress.com/2022/05/08/what-apple-maps-activity-can-be-found-using-a-logical-extraction/https://lordtemplar1.wordpress.com/2022/05/08/what-apple-maps-activity-can-be-found-using-a-logical-extraction/
http://cheeky4n6monkey.blogspot.com/2020/11/ios14-maps-history-blob-script.htmlhttp://cheeky4n6monkey.blogspot.com/2020/11/ios14-maps-history-blob-script.html
https://github.com/cheeky4n6monkey/4n6-scripts/blob/master/iOS/ios14_maps_history.pyhttps://github.com/cheeky4n6monkey/4n6-scripts/blob/master/iOS/ios14_maps_history.py
https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mapsSync.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mapsSync.py
https://github.com/RealityNet/iOS-Forensics-References#mobilelibrary-folder
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://blog.d204n6.com/2021/06/ios-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/ios-tracking-device-migration.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-beths-iphone.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-beths-iphone.html
https://www.forgottennook.com/blog/magnet-ios-2023https://www.forgottennook.com/blog/magnet-ios-2023
https://dfir.pubpub.org/pub/h6vyh33u/release/1https://dfir.pubpub.org/pub/h6vyh33u/release/1
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/accs.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/accs.py
https://github.com/kacos2000/Queries/blob/master/Accounts3_sqlite.sqlhttps://github.com/kacos2000/Queries/blob/master/Accounts3_sqlite.sql
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.systoolsgroup.com/forensics/sqlite/ios.htmlhttps://www.systoolsgroup.com/forensics/sqlite/ios.html
https://researchonline.gcu.ac.uk/ws/portalfiles/portal/24600592/K.Ovens_PID4325955.pdfhttps://researchonline.gcu.ac.uk/ws/portalfiles/portal/24600592/K.Ovens_PID4325955.pdf
https://smarterforensics.com/2017/09/time-is-not-on-our-side-when-it-comes-to-messages-in-ios-11/https://smarterforensics.com/2017/09/time-is-not-on-our-side-when-it-comes-to-messages-in-ios-11/
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/
https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/
https://www.marshall.edu/forensics/files/FRIEDMANRACHEL-Research-Paper-08242012.pdfhttps://www.marshall.edu/forensics/files/FRIEDMANRACHEL-Research-Paper-08242012.pdf
https://dfir.pubpub.org/pub/6i7d593n/release/1https://dfir.pubpub.org/pub/6i7d593n/release/1
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://github.com/kacos2000/Queries/blob/master/AddressBook_sqlite.sqlhttps://github.com/kacos2000/Queries/blob/master/AddressBook_sqlite.sql
https://www.champlain.edu/Documents/LCDI/iPhone%20Artifacts.pdfhttps://www.champlain.edu/Documents/LCDI/iPhone%20Artifacts.pdf
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/addressBook.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/addressBook.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://researchonline.gcu.ac.uk/ws/portalfiles/portal/24600592/K.Ovens_PID4325955.pdfhttps://researchonline.gcu.ac.uk/ws/portalfiles/portal/24600592/K.Ovens_PID4325955.pdf
https://smarterforensics.com/2019/09/ios-13-summary-for-those-of-you-who-enjoy-the-cliffsnotes/https://smarterforensics.com/2019/09/ios-13-summary-for-those-of-you-who-enjoy-the-cliffsnotes/
https://github.com/kacos2000/Queries/blob/master/AddressBookImages_sqlite.sqlhttps://github.com/kacos2000/Queries/blob/master/AddressBookImages_sqlite.sql
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.mac4n6.com/blog/2017/3/12/introduction-to-the-aggregate-dictionary-database-addatastoresqlitehttps://www.mac4n6.com/blog/2017/3/12/introduction-to-the-aggregate-dictionary-database-addatastoresqlite
https://www.mac4n6.com/blog/2018/12/18/on-the-fifth-day-of-apollo-my-true-love-gave-to-me-a-stocking-full-of-random-junk-some-of-which-might-be-usefulhttps://www.mac4n6.com/blog/2018/12/18/on-the-fifth-day-of-apollo-my-true-love-gave-to-me-a-stocking-full-of-random-junk-some-of-which-might-be-useful
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://www.zdziarski.com/blog/?p=2686https://www.zdziarski.com/blog/?p=2686
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://github.com/mac4n6/APOLLO/blob/master/modules/aggregate_dictionary_scalars.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/aggregate_dictionary_scalars.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/aggregate_dictionary_distributed_keys.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/aggregate_dictionary_distributed_keys.txt
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://github.com/Evian-Zhang/ScreenTimeController/blob/master/README.mdhttps://github.com/Evian-Zhang/ScreenTimeController/blob/master/README.md
https://cellebrite.com/en/data-quality-and-quantity-how-to-get-the-best-of-both-worlds-part-2-examining-screen-time-artifacts/https://cellebrite.com/en/data-quality-and-quantity-how-to-get-the-best-of-both-worlds-part-2-examining-screen-time-artifacts/
https://cellebrite.com/en/a-look-into-apples-screen-time-feature-and-what-insights-it-lends-to-digital-intelligence/https://cellebrite.com/en/a-look-into-apples-screen-time-feature-and-what-insights-it-lends-to-digital-intelligence/
https://www.forensicfocus.com/webinars/ios-screentine-and-android-digital-wellbeing-apps/https://www.forensicfocus.com/webinars/ios-screentine-and-android-digital-wellbeing-apps/
https://www.magnetforensics.com/blog/getting-evidence-from-ios-screen-time-artifacts/https://www.magnetforensics.com/blog/getting-evidence-from-ios-screen-time-artifacts/
https://plaso.readthedocs.io/en/latest/_modules/plaso/parsers/sqlite_plugins/ios_screentime.htmlhttps://plaso.readthedocs.io/en/latest/_modules/plaso/parsers/sqlite_plugins/ios_screentime.html
https://www.goldencelle.com/post/a-look-into-apple-s-screen-time-feature-and-what-insights-it-lends-to-forensicshttps://www.goldencelle.com/post/a-look-into-apple-s-screen-time-feature-and-what-insights-it-lends-to-forensics
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://www.forgottennook.com/blog/magnet-ios-2023https://www.forgottennook.com/blog/magnet-ios-2023
https://bakerstreetforensics.com/2022/07/28/magnet-2022-ctf-ios15/https://bakerstreetforensics.com/2022/07/28/magnet-2022-ctf-ios15/
https://github.com/ydkhatri/mac_apt/blob/master/plugins/screentime.pyhttps://github.com/ydkhatri/mac_apt/blob/master/plugins/screentime.py
https://github.com/mac4n6/APOLLO/blob/master/modules/screentime_timed_items.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/screentime_timed_items.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/screentime_counted_items.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/screentime_counted_items.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/screentime_by_hour.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/screentime_by_hour.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/screentime_by_category.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/screentime_by_category.txt
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.htmlhttps://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.html
https://bluecrewforensics.com/2022/03/07/ios-app-intents/https://bluecrewforensics.com/2022/03/07/ios-app-intents/
https://blog.d204n6.com/2022/09/ios-16-now-you-c-it-now-you-dont.htmlhttps://blog.d204n6.com/2022/09/ios-16-now-you-c-it-now-you-dont.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-2.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-2.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-4.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-4.html
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-5-hey.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-5-hey.html
https://www.magnetforensics.com/blog/bringing-it-back-with-biome-data/https://www.magnetforensics.com/blog/bringing-it-back-with-biome-data/
https://sqlmcgee.wordpress.com/2022/03/28/an-alternate-location-for-deleted-sms-imessage-data-in-apple-devices-2/https://sqlmcgee.wordpress.com/2022/03/28/an-alternate-location-for-deleted-sms-imessage-data-in-apple-devices-2/
https://dfir.pubpub.org/pub/yp6efc8q/release/1https://dfir.pubpub.org/pub/yp6efc8q/release/1
https://belkasoft.com/lagging-for-winhttps://belkasoft.com/lagging-for-win
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://www.forgottennook.com/blog/magnet-ios-2023https://www.forgottennook.com/blog/magnet-ios-2023
https://www.stark4n6.com/2023/03/magnet-virtual-summit-2023-ctf-ios-16.htmlhttps://www.stark4n6.com/2023/03/magnet-virtual-summit-2023-ctf-ios-16.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeAppinstall.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeAppinstall.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBacklight.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBacklight.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBattperc.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBattperc.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBluetooth.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeBluetooth.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeCarplayisconnected.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeCarplayisconnected.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeDevplugin.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeDevplugin.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeHardware.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeHardware.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeInfocus.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeInfocus.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeIntents.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeIntents.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeLocationactivity.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeLocationactivity.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotes.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotes.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotificationsPub.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNotificationsPub.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNowplaying.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeNowplaying.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSafari.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSafari.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSync.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeSync.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeTextinputses.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeTextinputses.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeUseractmeta.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeUseractmeta.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeWifi.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/biomeWifi.py
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://blog.d204n6.com/2022/04/airtag-youre-it.htmlhttps://blog.d204n6.com/2022/04/airtag-youre-it.html
https://medium.com/@Appalachian4n6/airtags-within-ios-file-systems-279dc783b69fhttps://medium.com/@Appalachian4n6/airtags-within-ios-file-systems-279dc783b69f
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/airtags.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/airtags.py
https://doubleblak.com/blogPosts.php?id=14https://doubleblak.com/blogPosts.php?id=14
https://doubleblak.com/BlogArticles/14/PDF2.pdfhttps://doubleblak.com/BlogArticles/14/PDF2.pdf
http://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysishttp://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysis
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://cellebrite.com/en/ios-location-artifacts-explained/https://cellebrite.com/en/ios-location-artifacts-explained/
https://cellebrite.com/en/episode-15-ibeg-to-dfir-location-data-on-ios-and-android-devices/https://cellebrite.com/en/episode-15-ibeg-to-dfir-location-data-on-ios-and-android-devices/
https://blog.elcomsoft.com/2018/06/apple-probably-knows-what-you-did-last-summer/https://blog.elcomsoft.com/2018/06/apple-probably-knows-what-you-did-last-summer/
https://www.researchgate.net/publication/352058134_UAV_Forensics_DJI_Mini_2_Case_Studyhttps://www.researchgate.net/publication/352058134_UAV_Forensics_DJI_Mini_2_Case_Study
https://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.htmlhttps://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.html
https://www.youtube.com/watch?v=eU7THDwFkiMhttps://www.youtube.com/watch?v=eU7THDwFkiM
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://theforensicscooter.com/2021/09/22/iphone-device-speeds-in-cache-sqlite-zrtcllocationmo/https://theforensicscooter.com/2021/09/22/iphone-device-speeds-in-cache-sqlite-zrtcllocationmo/
https://theforensicscooter.com/2022/07/01/vehicle-and-iphone-speed-comparison/https://theforensicscooter.com/2022/07/01/vehicle-and-iphone-speed-comparison/
https://github.com/ScottKjr3347/iOS_Cache.sqlite_Querieshttps://github.com/ScottKjr3347/iOS_Cache.sqlite_Queries
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cache_zrtcllocationmo.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cache_zrtcllocationmo.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cache_zrthintmo.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cache_zrthintmo.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cache_zrvisitmo.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cache_zrvisitmo.txt
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://doubleblak.com/blogPosts.php?id=14https://doubleblak.com/blogPosts.php?id=14
https://doubleblak.com/BlogArticles/14/PDF2.pdfhttps://doubleblak.com/BlogArticles/14/PDF2.pdf
http://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysishttp://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysis
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://cellebrite.com/en/ios-location-artifacts-explained/https://cellebrite.com/en/ios-location-artifacts-explained/
https://cellebrite.com/en/episode-15-ibeg-to-dfir-location-data-on-ios-and-android-devices/https://cellebrite.com/en/episode-15-ibeg-to-dfir-location-data-on-ios-and-android-devices/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
https://blog.elcomsoft.com/2018/06/apple-probably-knows-what-you-did-last-summer/https://blog.elcomsoft.com/2018/06/apple-probably-knows-what-you-did-last-summer/
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://www.youtube.com/watch?v=eU7THDwFkiMhttps://www.youtube.com/watch?v=eU7THDwFkiM
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_entry.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_entry.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_exit.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_exit.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_inbound_start.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_inbound_start.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_inbound_stop.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_inbound_stop.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_outbound_start.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_outbound_start.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_outbound_stop.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_visit_outbound_stop.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_address.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_address.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_mapitem.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_cloud_mapitem.txt
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://doubleblak.com/blogPosts.php?id=14https://doubleblak.com/blogPosts.php?id=14
https://doubleblak.com/BlogArticles/14/PDF2.pdfhttps://doubleblak.com/BlogArticles/14/PDF2.pdf
http://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysishttp://www.mac4n6.com/blog/2018/12/23/on-the-tenth-day-of-apollo-my-true-love-gave-to-me-an-oddly-detailed-map-of-my-recent-travels-ios-location-analysis
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://cellebrite.com/en/ios-location-artifacts-explained/https://cellebrite.com/en/ios-location-artifacts-explained/
https://cellebrite.com/en/episode-15-ibeg-to-dfir-location-data-on-ios-and-android-devices/https://cellebrite.com/en/episode-15-ibeg-to-dfir-location-data-on-ios-and-android-devices/
https://www.youtube.com/watch?v=eU7THDwFkiMhttps://www.youtube.com/watch?v=eU7THDwFkiM
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-beths-iphone.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-beths-iphone.html
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_entry.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_entry.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_exit.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_exit.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_transition_start.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_transition_start.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_transition_stop.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_learned_location_of_interest_transition_stop.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_vehicle_parked.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_vehicle_parked.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_vehicle_parked_history.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/routined_local_vehicle_parked_history.txt
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.htmlhttps://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.html
https://github.com/kacos2000/queries/blob/master/calendar_sqlitedb.sqlhttps://github.com/kacos2000/queries/blob/master/calendar_sqlitedb.sql
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/calendarAll.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/calendarAll.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://github.com/kacos2000/queries/blob/master/calendar_extras.sqlhttps://github.com/kacos2000/queries/blob/master/calendar_extras.sql
https://dfir.pubpub.org/pub/33vkc2ul/release/1https://dfir.pubpub.org/pub/33vkc2ul/release/1
https://smarterforensics.com/2016/09/a-glimpse-of-ios-10-from-a-smartphone-forensic-perspective/https://smarterforensics.com/2016/09/a-glimpse-of-ios-10-from-a-smartphone-forensic-perspective/
https://smarterforensics.com/2017/09/time-is-not-on-our-side-when-it-comes-to-messages-in-ios-11/https://smarterforensics.com/2017/09/time-is-not-on-our-side-when-it-comes-to-messages-in-ios-11/
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://smarterforensics.com/2019/09/ios-13-summary-for-those-of-you-who-enjoy-the-cliffsnotes/https://smarterforensics.com/2019/09/ios-13-summary-for-those-of-you-who-enjoy-the-cliffsnotes/
https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/https://smarterforensics.com/2020/09/rotten-to-the-core-nah-ios14-is-mostly-sweet/
https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/
https://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.htmlhttps://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.html
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-marshas-iphone.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-marshas-iphone.html
https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://github.com/kacos2000/queries/blob/master/callhistory_storedata.sqlhttps://github.com/kacos2000/queries/blob/master/callhistory_storedata.sql
https://github.com/mac4n6/APOLLO/blob/master/modules/call_history.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/call_history.txt
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/callHistory.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/callHistory.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.d204n6.com/2020/09/ios-14-tracking-app-clips-in-ios-14.htmlhttps://blog.d204n6.com/2020/09/ios-14-tracking-app-clips-in-ios-14.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
http://www.mac4n6.com/blog/2018/8/5/knowledge-is-power-using-the-knowledgecdb-database-on-macos-and-ios-to-determine-precise-user-and-application-usagehttp://www.mac4n6.com/blog/2018/8/5/knowledge-is-power-using-the-knowledgecdb-database-on-macos-and-ios-to-determine-precise-user-and-application-usage
https://www.mac4n6.com/blog/2018/9/12/knowledge-is-power-ii-a-day-in-the-life-of-my-iphone-using-knowledgecdbhttps://www.mac4n6.com/blog/2018/9/12/knowledge-is-power-ii-a-day-in-the-life-of-my-iphone-using-knowledgecdb
https://www.mac4n6.com/blog/2020/6/17/extensive-knowledgec-apollo-updateshttps://www.mac4n6.com/blog/2020/6/17/extensive-knowledgec-apollo-updates
https://www.mac4n6.com/blog/2020/6/21/socially-distant-but-still-interacting-new-and-improved-updates-to-macosios-coreduet-interactioncdb-apollo-moduleshttps://www.mac4n6.com/blog/2020/6/21/socially-distant-but-still-interacting-new-and-improved-updates-to-macosios-coreduet-interactioncdb-apollo-modules
https://www.mac4n6.com/blog/2020/1/13/apollo-into-the-details-with-application-activitieshttps://www.mac4n6.com/blog/2020/1/13/apollo-into-the-details-with-application-activities
https://www.mac4n6.com/blog/2018/12/16/on-the-third-day-of-apollo-my-true-love-gave-to-me-application-usage-to-determine-who-has-been-naughty-or-nicehttps://www.mac4n6.com/blog/2018/12/16/on-the-third-day-of-apollo-my-true-love-gave-to-me-application-usage-to-determine-who-has-been-naughty-or-nice
https://www.mac4n6.com/blog/2018/12/17/on-the-fourth-day-of-apollo-my-true-love-gave-to-me-media-analysis-to-prove-you-listened-to-all-i-want-for-christmas-is-you-over-and-over-since-before-thanksgivinghttps://www.mac4n6.com/blog/2018/12/17/on-the-fourth-day-of-apollo-my-true-love-gave-to-me-media-analysis-to-prove-you-listened-to-all-i-want-for-christmas-is-you-over-and-over-since-before-thanksgiving
https://www.mac4n6.com/blog/2018/12/19/on-the-sixth-day-of-apollo-my-true-love-gave-to-me-blinky-things-with-buttons-device-status-analysishttps://www.mac4n6.com/blog/2018/12/19/on-the-sixth-day-of-apollo-my-true-love-gave-to-me-blinky-things-with-buttons-device-status-analysis
http://www.mac4n6.com/blog/2018/12/21/on-the-eighth-day-of-apollo-my-true-love-gave-to-me-a-glorious-lightshow-analysis-of-device-connectionshttp://www.mac4n6.com/blog/2018/12/21/on-the-eighth-day-of-apollo-my-true-love-gave-to-me-a-glorious-lightshow-analysis-of-device-connections
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/
https://theforensicscooter.com/2021/10/03/ios-knowledgec-db-notifications/https://theforensicscooter.com/2021/10/03/ios-knowledgec-db-notifications/
https://dfir.pubpub.org/pub/g2v1z97i/release/1https://dfir.pubpub.org/pub/g2v1z97i/release/1
https://www.forensicmike1.com/2019/10/07/knowledgec-now-playing-entries/https://www.forensicmike1.com/2019/10/07/knowledgec-now-playing-entries/
https://dfir.pubpub.org/pub/v19rksyf/release/1https://dfir.pubpub.org/pub/v19rksyf/release/1
https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/
http://www.doubleblak.com/m/blogPosts.php?id=2http://www.doubleblak.com/m/blogPosts.php?id=2
https://www.youtube.com/watch?v=eU7THDwFkiMhttps://www.youtube.com/watch?v=eU7THDwFkiM
https://blog.d204n6.com/2022/09/ios-16-now-you-c-it-now-you-dont.htmlhttps://blog.d204n6.com/2022/09/ios-16-now-you-c-it-now-you-dont.html
https://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.htmlhttps://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.html
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.htmlhttps://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.html
https://github.com/ScottKjr3347/iOS_KnowledgeC.db_Querieshttps://github.com/ScottKjr3347/iOS_KnowledgeC.db_Queries
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_activity_level.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_activity_level.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_activity_level_feedback.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_activity_level_feedback.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_airplay_prediction.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_airplay_prediction.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_calendar.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_calendar.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_clock.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_clock.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_mail.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_mail.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_maps.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_maps.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_notes.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_notes.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_passbook.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_passbook.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_photos.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_photos.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_safari.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_safari.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_weather.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_activity_weather.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_inFocus.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_inFocus.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_install.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_install.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_intents.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_intents.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_location_activity.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_location_activity.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_media_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_media_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_relevantshortcuts.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_relevantshortcuts.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_webusage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_app_webusage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_bluetooth_connected.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_bluetooth_connected.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_input_route.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_input_route.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_media_nowplaying.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_media_nowplaying.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_output_route.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_audio_output_route.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_calendar_event_title.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_calendar_event_title.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_charging_smart_topoff_checkpoint.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_charging_smart_topoff_checkpoint.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_dasd_activity_profile.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_dasd_activity_profile.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_dasd_battery_temperature.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_dasd_battery_temperature.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_dasd_control_effort.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_dasd_control_effort.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_battery_saver.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_battery_saver.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_batterylevel.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_batterylevel.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_carplay_connected.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_carplay_connected.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_inferred_motion.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_inferred_motion.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_is_backlit.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_is_backlit.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_keybag_locked.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_keybag_locked.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_locked.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_locked.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_locked_imputed.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_locked_imputed.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_low_power_mode.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_low_power_mode.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_orientation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_orientation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_pluggedin.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_pluggedin.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_watch_nearby.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_device_watch_nearby.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_discoverability_signals.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_discoverability_signals.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_discoverability_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_discoverability_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_disk_subsystem_access.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_disk_subsystem_access.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_event_tombstone.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_event_tombstone.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_family_prediction.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_family_prediction.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_inferred_microlocation_visit.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_inferred_microlocation_visit.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_knowledge_sync_addition_window.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_knowledge_sync_addition_window.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_notification_usage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_notification_usage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_paired_device_nearby.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_paired_device_nearby.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_deletes_all.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_deletes_all.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_deletes_recent.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_deletes_recent.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_edit_all.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_edit_all.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_engagement.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_engagement.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_favorites_other.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_favorites_other.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_share_airdrop.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_share_airdrop.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_share_all.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_share_all.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_share_extension.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_photos_share_extension.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_portrait_entity.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_portrait_entity.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_portrait_topic.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_portrait_topic.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_safari_browsing.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_safari_browsing.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_segment_monitor.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_segment_monitor.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_settings_doNotDisturb.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_settings_doNotDisturb.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_sharesheet_feedback.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_sharesheet_feedback.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri_activites.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri_activites.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri_flow_activity.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri_flow_activity.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri_service.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_siri_service.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_spotlight_viewer_event.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_spotlight_viewer_event.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_standby_timer.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_standby_timer.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_sync_addition_window.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_sync_addition_window.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_sync_deletion_bookmark.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_sync_deletion_bookmark.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_system_airplane_mode.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_system_airplane_mode.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_system_tlc.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_system_tlc.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_system_userwakingevent.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_system_userwakingevent.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_user_first_backlight_after_wakeup.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_user_first_backlight_after_wakeup.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_user_interaction_app_directory.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_user_interaction_app_directory.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_widget_refresh.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_widget_refresh.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_widget_view.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_widget_view.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_widgets_viewed.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_widgets_viewed.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_wifi_connection.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/knowledge_wifi_connection.txt
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
http://www.doubleblak.com/m/blogPosts.php?id=2http://www.doubleblak.com/m/blogPosts.php?id=2
http://www.mac4n6.com/blog/2020/6/21/socially-distant-but-still-interacting-new-and-improved-updates-to-macosios-coreduet-interactioncdb-apollo-moduleshttp://www.mac4n6.com/blog/2020/6/21/socially-distant-but-still-interacting-new-and-improved-updates-to-macosios-coreduet-interactioncdb-apollo-modules
https://theforensicscooter.com/2022/02/21/photos-sqlite-update/https://theforensicscooter.com/2022/02/21/photos-sqlite-update/
https://www.arcpointforensics.com/news/comparison-of-ios-backupshttps://www.arcpointforensics.com/news/comparison-of-ios-backups
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://github.com/mac4n6/APOLLO/blob/master/modules/interaction_contact_interactions.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/interaction_contact_interactions.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/interaction_contact_interactions_keywords.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/interaction_contact_interactions_keywords.txt
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/interactionCcontacts.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/interactionCcontacts.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://www.marshall.edu/forensics/files/FRIEDMANRACHEL-Research-Paper-08242012.pdfhttps://www.marshall.edu/forensics/files/FRIEDMANRACHEL-Research-Paper-08242012.pdf
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/
https://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdfhttps://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdf
https://www.researchgate.net/publication/339022164_Data_Extraction_and_Forensic_Analysis_for_Smartphone_Paired_Wearables_and_IoT_Deviceshttps://www.researchgate.net/publication/339022164_Data_Extraction_and_Forensic_Analysis_for_Smartphone_Paired_Wearables_and_IoT_Devices
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/
https://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdfhttps://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdf
https://www.researchgate.net/publication/339022164_Data_Extraction_and_Forensic_Analysis_for_Smartphone_Paired_Wearables_and_IoT_Deviceshttps://www.researchgate.net/publication/339022164_Data_Extraction_and_Forensic_Analysis_for_Smartphone_Paired_Wearables_and_IoT_Devices
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.html
https://gforce4n6.blogspot.com/2022/05/peeking-at-user-notification-events-in.htmlhttps://gforce4n6.blogspot.com/2022/05/peeking-at-user-notification-events-in.html
https://dfrws.org/presentation/dfir-review-showcase-peeking-at-user-notification-events-in-ios-15/https://dfrws.org/presentation/dfir-review-showcase-peeking-at-user-notification-events-in-ios-15/
https://blog.d204n6.com/2022/09/ios-16-paul-unsent-message-or-did-he.htmlhttps://blog.d204n6.com/2022/09/ios-16-paul-unsent-message-or-did-he.html
https://www.forgottennook.com/blog/magnet-ios-2023https://www.forgottennook.com/blog/magnet-ios-2023
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsDuet.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsDuet.py
https://abrignoni.blogspot.com/2018/12/identifying-installed-and-uninstalled.htmlhttps://abrignoni.blogspot.com/2018/12/identifying-installed-and-uninstalled.html
https://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.htmlhttps://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.html
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
http://www.swiftforensics.com/2021/01/ios-application-groups-shared-data.htmlhttp://www.swiftforensics.com/2021/01/ios-application-groups-shared-data.html
https://blog.d204n6.com/2020/09/ios-tracking-bundle-ids-for-containers.htmlhttps://blog.d204n6.com/2020/09/ios-tracking-bundle-ids-for-containers.html
https://www.magnetforensics.com/blog/ios-tracking-bundle-ids-for-containers-shared-containers-and-plugins/https://www.magnetforensics.com/blog/ios-tracking-bundle-ids-for-containers-shared-containers-and-plugins/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.stark4n6.com/2020/06/magnet-virtual-summit-2020-ctf-ios.htmlhttps://www.stark4n6.com/2020/06/magnet-virtual-summit-2020-ctf-ios.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/applicationstate.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/applicationstate.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://github.com/mac4n6/Presentations/blob/master/%23DFIRFIT%20or%20BUST/DFIRFIT.pdfhttps://github.com/mac4n6/Presentations/blob/master/%23DFIRFIT%20or%20BUST/DFIRFIT.pdf
https://papers.put.as/papers/ios/2018/summit_archive_1528385073.pdfhttps://papers.put.as/papers/ios/2018/summit_archive_1528385073.pdf
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://papers.put.as/papers/ios/2018/summit_archive_1528385073.pdfhttps://papers.put.as/papers/ios/2018/summit_archive_1528385073.pdf
https://github.com/mac4n6/Presentations/blob/master/%23DFIRFIT%20or%20BUST/DFIRFIT.pdfhttps://github.com/mac4n6/Presentations/blob/master/%23DFIRFIT%20or%20BUST/DFIRFIT.pdf
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://dfir.pubpub.org/pub/xqvcn3hj/release/1https://dfir.pubpub.org/pub/xqvcn3hj/release/1
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://media.rootcon.org/ROOTCON%2012/Talks/Apple%20Health.pdfhttps://media.rootcon.org/ROOTCON%2012/Talks/Apple%20Health.pdf
https://www.elcomsoft.com/presentations/20200129_health_and_activity_evidence_en.pdfhttps://www.elcomsoft.com/presentations/20200129_health_and_activity_evidence_en.pdf
https://smarterforensics.com/wp-content/uploads/2018/11/Making-a-Murderer-Health-Edition_Stockholm.pdfhttps://smarterforensics.com/wp-content/uploads/2018/11/Making-a-Murderer-Health-Edition_Stockholm.pdf
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://www.stark4n6.com/2022/08/audio-and-app-usage-in-apple-health.htmlhttps://www.stark4n6.com/2022/08/audio-and-app-usage-in-apple-health.html
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://github.com/kacos2000/Queries/blob/master/healthdb.sqlhttps://github.com/kacos2000/Queries/blob/master/healthdb.sql
https://github.com/mac4n6/Presentations/blob/master/%23DFIRFIT%20or%20BUST/DFIRFIT.pdfhttps://github.com/mac4n6/Presentations/blob/master/%23DFIRFIT%20or%20BUST/DFIRFIT.pdf
https://papers.put.as/papers/ios/2018/summit_archive_1528385073.pdfhttps://papers.put.as/papers/ios/2018/summit_archive_1528385073.pdf
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://www.mac4n6.com/blog/2018/12/15/on-the-second-day-of-apollo-my-true-love-gave-to-me-holiday-treats-and-a-trip-to-the-gym-a-look-at-ios-health-datahttps://www.mac4n6.com/blog/2018/12/15/on-the-second-day-of-apollo-my-true-love-gave-to-me-holiday-treats-and-a-trip-to-the-gym-a-look-at-ios-health-data
http://www.mac4n6.com/blog/2019/9/27/just-call-me-buffy-the-proto-slayer-an-initial-look-into-protobuf-data-in-mac-and-ios-forensicshttp://www.mac4n6.com/blog/2019/9/27/just-call-me-buffy-the-proto-slayer-an-initial-look-into-protobuf-data-in-mac-and-ios-forensics
https://www.sciencedirect.com/science/article/pii/S1742287619300313https://www.sciencedirect.com/science/article/pii/S1742287619300313
https://dfrws.org/sites/default/files/session-files/2019_EU_paper-the_iphone_health_app_from_a_forensic_perspective.pdfhttps://dfrws.org/sites/default/files/session-files/2019_EU_paper-the_iphone_health_app_from_a_forensic_perspective.pdf
https://www.sciencedirect.com/science/article/abs/pii/S2666281721000780https://www.sciencedirect.com/science/article/abs/pii/S2666281721000780
https://www.sciencedirect.com/science/article/pii/S2666281723000057https://www.sciencedirect.com/science/article/pii/S2666281723000057
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://media.rootcon.org/ROOTCON%2012/Talks/Apple%20Health.pdfhttps://media.rootcon.org/ROOTCON%2012/Talks/Apple%20Health.pdf
https://www.elcomsoft.com/presentations/20200129_health_and_activity_evidence_en.pdfhttps://www.elcomsoft.com/presentations/20200129_health_and_activity_evidence_en.pdf
https://smarterforensics.com/wp-content/uploads/2018/11/Making-a-Murderer-Health-Edition_Stockholm.pdfhttps://smarterforensics.com/wp-content/uploads/2018/11/Making-a-Murderer-Health-Edition_Stockholm.pdf
https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/https://smarterforensics.com/2019/09/wont-you-back-that-thing-up-a-glimpse-of-ios-13-artifacts/
https://www.stark4n6.com/2022/08/audio-and-app-usage-in-apple-health.htmlhttps://www.stark4n6.com/2022/08/audio-and-app-usage-in-apple-health.html
https://dfir.pubpub.org/pub/xqvcn3hj/release/1https://dfir.pubpub.org/pub/xqvcn3hj/release/1
https://sqlmcgee.wordpress.com/2022/04/01/enriching-investigations-with-apple-watch-data-through-the-healthdb_secure-sqlite-database/https://sqlmcgee.wordpress.com/2022/04/01/enriching-investigations-with-apple-watch-data-through-the-healthdb_secure-sqlite-database/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://blog.elcomsoft.com/2019/01/securing-and-extracting-health-data-apple-health-vs-google-fit/https://blog.elcomsoft.com/2019/01/securing-and-extracting-health-data-apple-health-vs-google-fit/
https://www.youtube.com/watch?v=eU7THDwFkiMhttps://www.youtube.com/watch?v=eU7THDwFkiM
https://www.doubleblak.com/blogPosts.php?id=21https://www.doubleblak.com/blogPosts.php?id=21
http://prodigital4n6.blogspot.com/2017/07/personal-injury-insurance-fraud.htmlhttp://prodigital4n6.blogspot.com/2017/07/personal-injury-insurance-fraud.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://github.com/kacos2000/Queries/blob/master/healthdb_secure.sqlhttps://github.com/kacos2000/Queries/blob/master/healthdb_secure.sql
https://github.com/mac4n6/APOLLO/blob/master/modules/health_distance.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_distance.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_ecg_average_heart_rate.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_ecg_average_heart_rate.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_flights.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_flights.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_heart_rate.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_heart_rate.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_steps.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_steps.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_stood_up.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_stood_up.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_weight.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_weight.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_cadence.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_cadence.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_elevation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_elevation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_general.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_general.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_humidity.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_humidity.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_indoor.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_indoor.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_location_latitude.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_location_latitude.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_location_longitude.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_location_longitude.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_max_ground_elevation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_max_ground_elevation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_mets.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_mets.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_min_ground_elevation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_min_ground_elevation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_temperature.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_temperature.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_timeofday.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_timeofday.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_weather.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/health_workout_weather.txt
https://www.doubleblak.com/blogPosts.php?id=21https://www.doubleblak.com/blogPosts.php?id=21
https://blog.digital-forensics.it/2021/01/a-journey-into-iot-forensics-episode-5.htmlhttps://blog.digital-forensics.it/2021/01/a-journey-into-iot-forensics-episode-5.html
https://www.youtube.com/watch?v=D8AOXCBkaTYhttps://www.youtube.com/watch?v=D8AOXCBkaTY
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/keyboardLexicon.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/keyboardLexicon.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/keyboardAppUsage.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/keyboardAppUsage.py
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-appconduit.pyhttps://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-appconduit.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appConduit.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appConduit.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.htmlhttps://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.html
https://blog.digital-forensics.it/2021/01/a-journey-into-iot-forensics-episode-5.htmlhttps://blog.digital-forensics.it/2021/01/a-journey-into-iot-forensics-episode-5.html
https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mobileActivationLogs.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mobileActivationLogs.py
https://www.doubleblak.com/m/blogPosts.php?id=10https://www.doubleblak.com/m/blogPosts.php?id=10
https://researchonline.gcu.ac.uk/ws/portalfiles/portal/24600592/K.Ovens_PID4325955.pdfhttps://researchonline.gcu.ac.uk/ws/portalfiles/portal/24600592/K.Ovens_PID4325955.pdf
https://www.marshall.edu/forensics/files/FRIEDMANRACHEL-Research-Paper-08242012.pdfhttps://www.marshall.edu/forensics/files/FRIEDMANRACHEL-Research-Paper-08242012.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.systoolsgroup.com/forensics/sqlite/ios.htmlhttps://www.systoolsgroup.com/forensics/sqlite/ios.html
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.stark4n6.com/2020/06/magnet-virtual-summit-2020-ctf-ios.htmlhttps://www.stark4n6.com/2020/06/magnet-virtual-summit-2020-ctf-ios.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/medicalID.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/medicalID.py
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://objectivebythesea.org/v4/talks/OBTS_v4_sEdwards.pdfhttps://objectivebythesea.org/v4/talks/OBTS_v4_sEdwards.pdf
https://blog.elcomsoft.com/2018/08/analysing-apple-pay-transactions/https://blog.elcomsoft.com/2018/08/analysing-apple-pay-transactions/
https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
http://www.mac4n6.com/blog/2019/1/17/apple-pattern-of-life-lazy-outputer-apollo-updates-amp-40-new-modules-location-chat-calls-apple-pay-transactions-wallet-passes-safari-amp-health-workouts?rq=passes23.sqlitehttp://www.mac4n6.com/blog/2019/1/17/apple-pattern-of-life-lazy-outputer-apollo-updates-amp-40-new-modules-location-chat-calls-apple-pay-transactions-wallet-passes-safari-amp-health-workouts?rq=passes23.sqlite
https://github.com/mac4n6/APOLLO/blob/master/modules/passes23_unique_passes_cards.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/passes23_unique_passes_cards.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/passes23_wallet_passes.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/passes23_wallet_passes.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/passes23_wallet_transactions.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/passes23_wallet_transactions.txt
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWalletTransactions.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWalletTransactions.py
http://www.mac4n6.com/blog/2020/6/2/guest-post-by-bizzybarney-a-peek-inside-the-ppsqldatabasedb-personalization-portrait-databasehttp://www.mac4n6.com/blog/2020/6/2/guest-post-by-bizzybarney-a-peek-inside-the-ppsqldatabasedb-personalization-portrait-database
https://www.youtube.com/watch?v=8Fy83iQ4f8Qhttps://www.youtube.com/watch?v=8Fy83iQ4f8Q
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.oreilly.com/library/view/hacking-and-securing/9781449325213/ch04.htmlhttps://www.oreilly.com/library/view/hacking-and-securing/9781449325213/ch04.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/09/16/shared-with-you-syndication-photo-library-message-attachments-linked-assets/https://theforensicscooter.com/2022/09/16/shared-with-you-syndication-photo-library-message-attachments-linked-assets/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://thebinaryhick.blog/2019/05/08/ridin-with-apple-carplay/https://thebinaryhick.blog/2019/05/08/ridin-with-apple-carplay/
https://papers.put.as/papers/ios/2019/summit_archive_1564072550.pdfhttps://papers.put.as/papers/ios/2019/summit_archive_1564072550.pdf
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-3.html
https://www.mdpi.com/1424-8220/22/19/7196/pdfhttps://www.mdpi.com/1424-8220/22/19/7196/pdf
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-marshas-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-marshas-iphone.html
https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4
https://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlayhttps://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlay
https://thebinaryhick.blog/2019/05/08/ridin-with-apple-carplay/https://thebinaryhick.blog/2019/05/08/ridin-with-apple-carplay/
https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4
https://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlayhttps://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlay
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://blog.d204n6.com/2021/06/ios-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/ios-tracking-device-migration.html
https://cellebrite.com/en/how-ios-properties-files-can-confirm-a-suspects-contacts-even-if-data-deleted/https://cellebrite.com/en/how-ios-properties-files-can-confirm-a-suspects-contacts-even-if-data-deleted/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://forensicskween.com/research/making-the-most-of-property-lists/https://forensicskween.com/research/making-the-most-of-property-lists/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://dfir.pubpub.org/pub/4sv4kxyh/release/2https://dfir.pubpub.org/pub/4sv4kxyh/release/2
https://theforensicscooter.com/2021/09/20/ios-location-services-and-system-services-on-or-off/https://theforensicscooter.com/2021/09/20/ios-location-services-and-system-services-on-or-off/
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://blog.d204n6.com/2021/06/ios-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/ios-tracking-device-migration.html
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.digitalforensics.com/blog/articles/who-is-the-owner-of-the-mobile-device/https://www.digitalforensics.com/blog/articles/who-is-the-owner-of-the-mobile-device/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://improsec.com/tech-blog/what-is-the-likelihood-of-recovering-deleted-iphone-messageshttps://improsec.com/tech-blog/what-is-the-likelihood-of-recovering-deleted-iphone-messages
https://static1.squarespace.com/static/62ab5b933d903d4c55e5d716/t/62fa28d8fd3a89429f8a9a80/1660561630138/MissingPieces_Hyde_Quezada_Final.pdfhttps://static1.squarespace.com/static/62ab5b933d903d4c55e5d716/t/62fa28d8fd3a89429f8a9a80/1660561630138/MissingPieces_Hyde_Quezada_Final.pdf
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://bitsplease4n6.wordpress.com/2020/12/17/wireless-network-preferences-ios/https://bitsplease4n6.wordpress.com/2020/12/17/wireless-network-preferences-ios/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.d204n6.com/2021/06/ios-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/ios-tracking-device-migration.html
https://dfrws.org/wp-content/uploads/2020/06/2020_USA_pres-putting_a_user_behind_an_ios_device.pdfhttps://dfrws.org/wp-content/uploads/2020/06/2020_USA_pres-putting_a_user_behind_an_ios_device.pdf
https://dfir.pubpub.org/pub/2q177smo/release/5https://dfir.pubpub.org/pub/2q177smo/release/5
https://dfir.pubpub.org/pub/6i7d593n/release/1https://dfir.pubpub.org/pub/6i7d593n/release/1
https://smarterforensics.com/2019/01/how-was-an-iphone-setup/https://smarterforensics.com/2019/01/how-was-an-iphone-setup/
https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
http://www.mac4n6.com/blog/2020/6/5/analysis-of-apple-unified-logs-quarantine-edition-entry-11-airdropping-some-knowledgehttp://www.mac4n6.com/blog/2020/6/5/analysis-of-apple-unified-logs-quarantine-edition-entry-11-airdropping-some-knowledge
https://smarterforensics.com/wp-content/uploads/2014/06/The-Cider-Press-DFIR_Summit2017.pdfhttps://smarterforensics.com/wp-content/uploads/2014/06/The-Cider-Press-DFIR_Summit2017.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.iphonebackupextractor.com/guides/recover-screen-time-parental-restrictions-passcode/https://www.iphonebackupextractor.com/guides/recover-screen-time-parental-restrictions-passcode/
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4
https://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlayhttps://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlay
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://github.com/kacos2000/queries/blob/master/recents.sqlhttps://github.com/kacos2000/queries/blob/master/recents.sql
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/reminders.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/reminders.py
https://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.htmlhttps://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.html
https://www.systoolsgroup.com/forensics/sqlite/ios.htmlhttps://www.systoolsgroup.com/forensics/sqlite/ios.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariBookmarks.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariBookmarks.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.opentext.com/file_source/OpenText/en_US/PDF/Examining-mobiledevices-&-private-internet-browsing-activity-whitepaper-en.pdfhttps://www.opentext.com/file_source/OpenText/en_US/PDF/Examining-mobiledevices-&-private-internet-browsing-activity-whitepaper-en.pdf
https://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.htmlhttps://blog.d204n6.com/2020/09/ios-14-first-thoughts-and-analysis.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariTabs.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariTabs.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariTabs.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariTabs.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://dfir.pubpub.org/pub/33vkc2ul/release/1https://dfir.pubpub.org/pub/33vkc2ul/release/1
https://www.opentext.com/file_source/OpenText/en_US/PDF/Examining-mobiledevices-&-private-internet-browsing-activity-whitepaper-en.pdfhttps://www.opentext.com/file_source/OpenText/en_US/PDF/Examining-mobiledevices-&-private-internet-browsing-activity-whitepaper-en.pdf
http://www.doubleblak.com/m/blogPosts.php?id=2http://www.doubleblak.com/m/blogPosts.php?id=2
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.htmlhttps://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.html
https://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.htmlhttps://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.html
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
http://2016.padjo.org/tutorials/sqlite-your-browser-history/http://2016.padjo.org/tutorials/sqlite-your-browser-history/
https://github.com/mac4n6/APOLLO/blob/master/modules/safari_history.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/safari_history.txt
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariHistory.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/safariHistory.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-4.htmlhttps://blog.d204n6.com/2022/09/ios-16-breaking-down-biomes-part-4.html
https://www.magnetforensics.com/blog/ios-16-what-digital-investigators-need-to-know/https://www.magnetforensics.com/blog/ios-16-what-digital-investigators-need-to-know/
https://www.magnetforensics.com/blog/checking-in-on-ios-16-in-magnet-axiom-6-8/https://www.magnetforensics.com/blog/checking-in-on-ios-16-in-magnet-axiom-6-8/
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://dfir.pubpub.org/pub/v19rksyf/release/1https://dfir.pubpub.org/pub/v19rksyf/release/1
https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/
https://theforensicscooter.com/2022/09/16/shared-with-you-syndication-photo-library-message-attachments-linked-assets/https://theforensicscooter.com/2022/09/16/shared-with-you-syndication-photo-library-message-attachments-linked-assets/
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/draftmessage.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/draftmessage.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.magnetforensics.com/blog/the-meaning-of-messages/https://www.magnetforensics.com/blog/the-meaning-of-messages/
https://doubleblak.com/blogPosts.php?id=27https://doubleblak.com/blogPosts.php?id=27
https://blog.d204n6.com/2022/09/ios-16-paul-unsent-message-or-did-he.htmlhttps://blog.d204n6.com/2022/09/ios-16-paul-unsent-message-or-did-he.html
https://doubleblak.com/blogPosts.php?id=24https://doubleblak.com/blogPosts.php?id=24
https://thebinaryhick.blog/2021/09/29/sharing-locations-in-ios-messages/https://thebinaryhick.blog/2021/09/29/sharing-locations-in-ios-messages/
https://blog.d204n6.com/2020/09/ios-14-message-mentions-and-threading.htmlhttps://blog.d204n6.com/2020/09/ios-14-message-mentions-and-threading.html
https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://belkasoft.com/lagging-for-winhttps://belkasoft.com/lagging-for-win
https://sqlmcgee.wordpress.com/2022/03/28/an-alternate-location-for-deleted-sms-imessage-data-in-apple-devices-2/https://sqlmcgee.wordpress.com/2022/03/28/an-alternate-location-for-deleted-sms-imessage-data-in-apple-devices-2/
https://dfir.pubpub.org/pub/yp6efc8q/release/1https://dfir.pubpub.org/pub/yp6efc8q/release/1
https://dfir.pubpub.org/pub/33vkc2ul/release/1https://dfir.pubpub.org/pub/33vkc2ul/release/1
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/
http://www.doubleblak.com/m/blogPosts.php?id=2http://www.doubleblak.com/m/blogPosts.php?id=2
https://personal.cis.strath.ac.uk/george.weir/cyfor14/papers/4_govan_ovans.pdfhttps://personal.cis.strath.ac.uk/george.weir/cyfor14/papers/4_govan_ovans.pdf
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/sms.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/sms.py
https://github.com/mac4n6/APOLLO/blob/master/modules/sms_chat.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/sms_chat.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/sms_chat_message_delivered.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/sms_chat_message_delivered.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/sms_chat_message_read.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/sms_chat_message_read.txt
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://thebinaryhick.blog/2021/07/25/today-widgets-ignored-apps-in-ios/https://thebinaryhick.blog/2021/07/25/today-widgets-ignored-apps-in-ios/
https://www.magnetforensics.com/blog/recover-ios-app-screen-layouts-with-the-new-ios-home-screen-items-artifact/https://www.magnetforensics.com/blog/recover-ios-app-screen-layouts-with-the-new-ios-home-screen-items-artifact/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/iconsScreen.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/iconsScreen.py
https://salt4n6.com/2018/05/15/a-few-interesting-ios-forensic-artefacts/https://salt4n6.com/2018/05/15/a-few-interesting-ios-forensic-artefacts/
https://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.htmlhttps://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.html
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4https://link.springer.com/chapter/10.1007/978-3-031-06365-7_4
https://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlayhttps://github.com/BiTLab-BaggiliTruthLab/Auto-Parser-Android-Auto-Apple-CarPlay
https://papers.put.as/papers/ios/2019/summit_archive_1564072550.pdfhttps://papers.put.as/papers/ios/2019/summit_archive_1564072550.pdf
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://github.com/jakev/pushstore-parserhttps://github.com/jakev/pushstore-parser
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsXI.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsXI.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/queryPredictions.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/queryPredictions.py
https://github.com/mac4n6/APOLLO/blob/master/modules/query_predictions.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/query_predictions.txt
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
http://www.mac4n6.com/blog/2020/6/1/analysis-of-apple-unified-logs-quarantine-edition-entry-10-you-down-with-tcc-yea-you-know-me-tracking-app-permissions-and-the-tcc-apollo-module?rq=tcchttp://www.mac4n6.com/blog/2020/6/1/analysis-of-apple-unified-logs-quarantine-edition-entry-10-you-down-with-tcc-yea-you-know-me-tracking-app-permissions-and-the-tcc-apollo-module?rq=tcc
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/tcc.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/tcc.py
https://github.com/mac4n6/APOLLO/blob/master/modules/tcc_db.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/tcc_db.txt
https://theforensicscooter.com/2021/09/05/ios-settings-display-auto-lock-require-passcode/https://theforensicscooter.com/2021/09/05/ios-settings-display-auto-lock-require-passcode/
https://dfir.pubpub.org/pub/khnqi0ff/release/1https://dfir.pubpub.org/pub/khnqi0ff/release/1
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-beths-iphone.html
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.htmlhttps://www.stark4n6.com/2022/06/magnet-user-summit-2022-ctf-iphone.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsXII.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/notificationsXII.py
https://www.mdpi.com/2076-3417/12/21/11180https://www.mdpi.com/2076-3417/12/21/11180
https://www.linkedin.com/pulse/ios-voicemail-transcripts-charlie-rubisoff/https://www.linkedin.com/pulse/ios-voicemail-transcripts-charlie-rubisoff/
http://cheeky4n6monkey.blogspot.com/2013/01/dude-wheres-my-banana-retrieving-data.htmlhttp://cheeky4n6monkey.blogspot.com/2013/01/dude-wheres-my-banana-retrieving-data.html
http://az4n6.blogspot.com/2012/12/dude-wheres-my-data.htmlhttp://az4n6.blogspot.com/2012/12/dude-wheres-my-data.html
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://github.com/RealityNet/iOS-Forensics-References#mobilemedia-folder
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/
https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/
https://dfir.pubpub.org/pub/v19rksyf/release/1https://dfir.pubpub.org/pub/v19rksyf/release/1
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/
https://www.stark4n6.com/2022/06/cellebrite-ctf-2022-marshas-iphone.htmlhttps://www.stark4n6.com/2022/06/cellebrite-ctf-2022-marshas-iphone.html
https://www.forgottennook.com/blog/magnet-ios-2023https://www.forgottennook.com/blog/magnet-ios-2023
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/
https://www.forensicfocus.com/webinars/forensicating-the-apple-tv/https://www.forensicfocus.com/webinars/forensicating-the-apple-tv/
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/
https://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdfhttps://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdf
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mediaLibrary.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mediaLibrary.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://farleyforensics.com/2019/04/14/forensic-analysis-of-itunes-backups/https://farleyforensics.com/2019/04/14/forensic-analysis-of-itunes-backups/
http://www.mac4n6.com/blog/2020/7/19/follow-on-to-dfir-summit-talk-lucky-ios-13-time-to-press-your-bets-via-bizzybarneyhttp://www.mac4n6.com/blog/2020/7/19/follow-on-to-dfir-summit-talk-lucky-ios-13-time-to-press-your-bets-via-bizzybarney
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/02/21/photos-sqlite-update/https://theforensicscooter.com/2022/02/21/photos-sqlite-update/
https://theforensicscooter.com/2022/12/03/photos-sqlite-zinternalresource-table-reference-guide/https://theforensicscooter.com/2022/12/03/photos-sqlite-zinternalresource-table-reference-guide/
https://gforce4n6.blogspot.com/2020/09/sharing-is-caring-overview-of-shared.htmlhttps://gforce4n6.blogspot.com/2020/09/sharing-is-caring-overview-of-shared.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/icloudSharedalbums.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/icloudSharedalbums.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://theforensicscooter.com/2021/11/23/photos-sqlite-queries/https://theforensicscooter.com/2021/11/23/photos-sqlite-queries/
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/02/21/photos-sqlite-update/https://theforensicscooter.com/2022/02/21/photos-sqlite-update/
https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/https://theforensicscooter.com/2022/07/29/how-to-find-ios-hidden-assets/
https://theforensicscooter.com/2022/12/03/photos-sqlite-zinternalresource-table-reference-guide/https://theforensicscooter.com/2022/12/03/photos-sqlite-zinternalresource-table-reference-guide/
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://theforensicscooter.com/2022/12/03/part-b-filling-a-device-internal-storage-for-optimize-iphone-storage-research/https://theforensicscooter.com/2022/12/03/part-b-filling-a-device-internal-storage-for-optimize-iphone-storage-research/
https://www.doubleblak.com/blogPosts.php?id=23https://www.doubleblak.com/blogPosts.php?id=23
https://github.com/ScottKjr3347/iOS_Local_PL_Photos.sqlite_Querieshttps://github.com/ScottKjr3347/iOS_Local_PL_Photos.sqlite_Queries
https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/https://smarterforensics.com/2020/08/does-photos-sqlite-have-relations-with-cameramessagesapp-by-scott-koenig/
https://dfir.pubpub.org/pub/v19rksyf/release/1https://dfir.pubpub.org/pub/v19rksyf/release/1
https://msab.com/guides-whitepapers/forensic-dive-into-ios-photos-sqlite-database/https://msab.com/guides-whitepapers/forensic-dive-into-ios-photos-sqlite-database/
https://www.msab.com/blog/media-attribution-for-ios/https://www.msab.com/blog/media-attribution-for-ios/
https://www.forensicmike1.com/2019/05/02/ios-photos-sqlite-forensics/https://www.forensicmike1.com/2019/05/02/ios-photos-sqlite-forensics/
https://www.magnetforensics.com/blog/macos-ios-photos-support-with-magnet-axiom/https://www.magnetforensics.com/blog/macos-ios-photos-support-with-magnet-axiom/
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://forensenellanebbia.blogspot.com/2015/10/apple-ios-recently-deleted-images.htmlhttps://forensenellanebbia.blogspot.com/2015/10/apple-ios-recently-deleted-images.html
https://www.tonkata.com/posts/apple-photos/https://www.tonkata.com/posts/apple-photos/
https://github.com/kacos2000/queries/blob/master/Photos_sqlite.sqlhttps://github.com/kacos2000/queries/blob/master/Photos_sqlite.sql
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/photosMetadata.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/photosMetadata.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://athenaforensics.co.uk/iphone-photodata-thumbnails/https://athenaforensics.co.uk/iphone-photodata-thumbnails/
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/https://theforensicscooter.com/2022/12/05/do-you-have-a-full-sized-assetor-just-a-thumbnail-did-optimized-iphone-storage-process-occur/
https://theforensicscooter.com/2022/12/03/photos-sqlite-zinternalresource-table-reference-guide/https://theforensicscooter.com/2022/12/03/photos-sqlite-zinternalresource-table-reference-guide/
http://dig-forensics.blogspot.com/2013/05/ios-ithmbs.htmlhttp://dig-forensics.blogspot.com/2013/05/ios-ithmbs.html
https://www.ithmbconverter.com/https://www.ithmbconverter.com/
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://iopscience.iop.org/article/10.1088/1742-6596/1345/5/052053/pdfhttps://iopscience.iop.org/article/10.1088/1742-6596/1345/5/052053/pdf
https://www.sciencedirect.com/science/article/abs/pii/S0379073821000220https://www.sciencedirect.com/science/article/abs/pii/S0379073821000220
https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.15016https://onlinelibrary.wiley.com/doi/abs/10.1111/1556-4029.15016
https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/https://ciofecaforensics.com/2020/10/30/cellebrite-ctf-juan/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/voiceRecordings.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/voiceRecordings.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://github.com/RealityNet/iOS-Forensics-References#mobilemobilesoftwareupdate-folder
https://www.stark4n6.com/2021/10/restore-log-tracking-ios-update-history.htmlhttps://www.stark4n6.com/2021/10/restore-log-tracking-ios-update-history.html
https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708https://medium.com/@williamskosasi/cellebrite-ctf-2021-writeup-b73d821a708
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/restoreLog.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/restoreLog.py
https://github.com/RealityNet/iOS-Forensics-References#networkd-folder
http://www.mac4n6.com/blog/2019/1/6/network-and-application-usage-using-netusagesqlite-amp-datausagesqlite-ios-databaseshttp://www.mac4n6.com/blog/2019/1/6/network-and-application-usage-using-netusagesqlite-amp-datausagesqlite-ios-databases
https://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.htmlhttps://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.html
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/netusage.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/netusage.py
https://github.com/mac4n6/APOLLO/blob/master/modules/netusage_zprocess.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/netusage_zprocess.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/netusage_zliveusage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/netusage_zliveusage.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/netusage_zliverouteperf.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/netusage_zliverouteperf.txt
https://github.com/RealityNet/iOS-Forensics-References#preferences-folder
https://ciofecaforensics.com/2020/10/24/apple-private-addresses/https://ciofecaforensics.com/2020/10/24/apple-private-addresses/
https://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.htmlhttps://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.html
https://github.com/ydkhatri/mac_apt/blob/master/plugins/ios_wifi.pyhttps://github.com/ydkhatri/mac_apt/blob/master/plugins/ios_wifi.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/confaccts.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/confaccts.py
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://blog.elcomsoft.com/2014/03/itunes-icloud-backups/https://blog.elcomsoft.com/2014/03/itunes-icloud-backups/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://www.forensicfocus.com/articles/from-iphone-to-access-point/https://www.forensicfocus.com/articles/from-iphone-to-access-point/
https://ciofecaforensics.com/2020/10/24/apple-private-addresses/https://ciofecaforensics.com/2020/10/24/apple-private-addresses/
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.htmlhttps://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.html
https://bitsplease4n6.wordpress.com/2020/12/08/wifi-networks-ios/https://bitsplease4n6.wordpress.com/2020/12/08/wifi-networks-ios/
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/https://www.forensicfocus.com/webinars/apple-watch-forensics-is-it-ever-possible-and-what-is-the-profit/
https://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdfhttps://dfrws.org/wp-content/uploads/2019/06/2019_EU_pres-apple_watch_forensics_is_it_ever_possible_and_what_is_the_profit.pdf
https://blog.digital-forensics.it/2021/01/a-journey-into-iot-forensics-episode-5.htmlhttps://blog.digital-forensics.it/2021/01/a-journey-into-iot-forensics-episode-5.html
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/19-5551_Web.pdfhttps://cts-forensics.com/reports/19-5551_Web.pdf
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-wifi-plist.pyhttps://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-wifi-plist.py
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWifiPlist.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWifiPlist.py
https://github.com/ydkhatri/mac_apt/blob/master/plugins/ios_wifi.pyhttps://github.com/ydkhatri/mac_apt/blob/master/plugins/ios_wifi.py
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://ciofecaforensics.com/2020/10/24/apple-private-addresses/https://ciofecaforensics.com/2020/10/24/apple-private-addresses/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWifiPlist.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/appleWifiPlist.py
https://github.com/ydkhatri/mac_apt/blob/master/plugins/ios_wifi.pyhttps://github.com/ydkhatri/mac_apt/blob/master/plugins/ios_wifi.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-networkinterfaces.pyhttps://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-networkinterfaces.py
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://github.com/RealityNet/iOS-Forensics-References#root-folder
https://dfir.pubpub.org/pub/6i7d593n/release/1https://dfir.pubpub.org/pub/6i7d593n/release/1
https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/https://ciofecaforensics.com/2020/11/02/cellebrite-ctf-ruth/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/wifiNetworkStoreModel.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/wifiNetworkStoreModel.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://doubleblak.com/blogPosts.php?id=14https://doubleblak.com/blogPosts.php?id=14
https://www.doubleblak.com/blogPosts.php?id=16https://www.doubleblak.com/blogPosts.php?id=16
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://thebinaryhick.blog/2019/05/08/ridin-with-apple-carplay/https://thebinaryhick.blog/2019/05/08/ridin-with-apple-carplay/
http://www.mac4n6.com/blog/2016/6/6/new-script-ios-locations-scraperhttp://www.mac4n6.com/blog/2016/6/6/new-script-ios-locations-scraper
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://www.systoolsgroup.com/forensics/sqlite/ios.htmlhttps://www.systoolsgroup.com/forensics/sqlite/ios.html
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_cdmacelllocation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_cdmacelllocation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocationlocal.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocationlocal.txt
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
http://www.mac4n6.com/blog/2016/6/6/new-script-ios-locations-scraperhttp://www.mac4n6.com/blog/2016/6/6/new-script-ios-locations-scraper
https://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdfhttps://conference.hitb.org/hitbsecconf2018pek/materials/D2T2%20-%20How%20Your%20Smartphone%20Tracks%20Your%20Entire%20Life%20-%20Vladimir%20Katalov.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.doubleblak.com/blogPosts.php?id=16https://www.doubleblak.com/blogPosts.php?id=16
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_cdmacelllocation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_cdmacelllocation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocation.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocation.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocationlocal.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedAB_celllocationlocal.txt
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://for585.com/dfirsummit22https://for585.com/dfirsummit22
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedC_motionstatehistory.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedC_motionstatehistory.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedC_stepcounthistory.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedC_stepcounthistory.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedC_nataliehistory.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/locationd_cacheencryptedC_nataliehistory.txt
https://www.sciencedirect.com/science/article/abs/pii/S2666281721000780https://www.sciencedirect.com/science/article/abs/pii/S2666281721000780
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://theforensicscooter.com/2021/09/20/ios-location-services-and-system-services-on-or-off/https://theforensicscooter.com/2021/09/20/ios-location-services-and-system-services-on-or-off/
https://dfir.pubpub.org/pub/4sv4kxyh/release/2https://dfir.pubpub.org/pub/4sv4kxyh/release/2
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
http://www.doubleblak.com/m/blogPosts.php?id=22http://www.doubleblak.com/m/blogPosts.php?id=22
https://belkasoft.com/belkactf-jul2022-writeuphttps://belkasoft.com/belkactf-jul2022-writeup
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://dfrws.org/wp-content/uploads/2020/06/2020_USA_pres-putting_a_user_behind_an_ios_device.pdfhttps://dfrws.org/wp-content/uploads/2020/06/2020_USA_pres-putting_a_user_behind_an_ios_device.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://blog.digital-forensics.it/2021/05/oh-no-i-have-wiped-iphone-now-what.htmlhttps://blog.digital-forensics.it/2021/05/oh-no-i-have-wiped-iphone-now-what.html
http://www.doubleblak.com/m/blogPosts.php?id=2http://www.doubleblak.com/m/blogPosts.php?id=2
https://www.stark4n6.com/2020/06/magnet-virtual-summit-2020-ctf-ios.htmlhttps://www.stark4n6.com/2020/06/magnet-virtual-summit-2020-ctf-ios.html
https://blog.d204n6.com/2021/06/ios-tracking-device-migration.htmlhttps://blog.d204n6.com/2021/06/ios-tracking-device-migration.html
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://jon-gabilondo-angulo-7635.medium.com/understanding-usbmux-and-the-ios-lockdown-service-7f2a1dfd07aehttps://jon-gabilondo-angulo-7635.medium.com/understanding-usbmux-and-the-ios-lockdown-service-7f2a1dfd07ae
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://jon-gabilondo-angulo-7635.medium.com/understanding-usbmux-and-the-ios-lockdown-service-7f2a1dfd07aehttps://jon-gabilondo-angulo-7635.medium.com/understanding-usbmux-and-the-ios-lockdown-service-7f2a1dfd07ae
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/https://athenaforensics.co.uk/how-to-identify-when-an-iphone-or-ipad-was-factory-reset/
http://www.doubleblak.com/m/blogPosts.php?id=9http://www.doubleblak.com/m/blogPosts.php?id=9
https://dfir.pubpub.org/pub/6i7d593n/release/1https://dfir.pubpub.org/pub/6i7d593n/release/1
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/https://blog.elcomsoft.com/2019/09/apple-tv-forensics-03-analysis/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mobileContainerManager.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/mobileContainerManager.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
http://www.swiftforensics.com/2021/01/ios-application-groups-shared-data.htmlhttp://www.swiftforensics.com/2021/01/ios-application-groups-shared-data.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://for585.com/sysdiagnosehttps://for585.com/sysdiagnose
https://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.htmlhttps://blog.digital-forensics.it/2022/11/sysdiagnose-in-ios-16-first-look-from.html
https://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-mobilebackup.pyhttps://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts/blob/master/sysdiagnose-mobilebackup.py
https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://bitsplease4n6.wordpress.com/2020/12/17/wireless-network-preferences-ios/https://bitsplease4n6.wordpress.com/2020/12/17/wireless-network-preferences-ios/
https://github.com/RealityNet/iOS-Forensics-References#wireless-folder
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://salt4n6.com/2018/05/15/a-few-interesting-ios-forensic-artefacts/https://salt4n6.com/2018/05/15/a-few-interesting-ios-forensic-artefacts/
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://www.stark4n6.com/2021/10/cellebrite-ctf-2021-marshas-backup.htmlhttps://www.stark4n6.com/2021/10/cellebrite-ctf-2021-marshas-backup.html
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
http://www.mac4n6.com/blog/2019/1/6/network-and-application-usage-using-netusagesqlite-amp-datausagesqlite-ios-databaseshttp://www.mac4n6.com/blog/2019/1/6/network-and-application-usage-using-netusagesqlite-amp-datausagesqlite-ios-databases
https://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdfhttps://objectivebythesea.org/v1/talks/OBTS_v1_Edwards.pdf
https://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.htmlhttps://blog.d204n6.com/2019/09/ios-tracking-traces-of-deleted.html
https://www.youtube.com/watch?v=4LcQm4ErXpAhttps://www.youtube.com/watch?v=4LcQm4ErXpA
https://cts-forensics.com/reports/20-5551_Web.pdfhttps://cts-forensics.com/reports/20-5551_Web.pdf
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://github.com/mac4n6/APOLLO/blob/master/modules/datausage_zprocess.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/datausage_zprocess.txt
https://github.com/mac4n6/APOLLO/blob/master/modules/datausage_zliveusage.txthttps://github.com/mac4n6/APOLLO/blob/master/modules/datausage_zliveusage.txt
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/netusage.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/netusage.py
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/https://thebinaryhick.blog/2022/12/06/mo-sims-mo-problems-examining-phones-with-dual-sims/
https://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/simInfo.pyhttps://github.com/abrignoni/iLEAPP/blob/main/scripts/artifacts/simInfo.py
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.htmlhttps://blog.digital-forensics.it/2019/12/checkra1n-era-ep-4-analyzing.html
https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/https://andreafortuna.org/2020/08/31/ios-forensics-hfs-file-system-partitions-and-relevant-evidences/
https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/https://andreafortuna.org/2020/01/10/ios-forensics-bfu-before-first-unlock-acquisition-using-checkra1n/
https://infosecaddicts.com/artifacts-ios-device/https://infosecaddicts.com/artifacts-ios-device/
https://cts-forensics.com/reports/38551_Web.pdfhttps://cts-forensics.com/reports/38551_Web.pdf
https://cts-forensics.com/reports/21-5551_Web.pdfhttps://cts-forensics.com/reports/21-5551_Web.pdf
https://cts-forensics.com/reports/22-5551_Web.pdfhttps://cts-forensics.com/reports/22-5551_Web.pdf
https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520https://www.packtpub.com/product/practical-mobile-forensics-fourth-edition/9781838647520
https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083https://www.packtpub.com/product/ios-forensics-for-investigators/9781803234083
Readme https://github.com/RealityNet/iOS-Forensics-References#readme-ov-file
Please reload this pagehttps://github.com/RealityNet/iOS-Forensics-References
Activityhttps://github.com/RealityNet/iOS-Forensics-References/activity
Custom propertieshttps://github.com/RealityNet/iOS-Forensics-References/custom-properties
30 forkshttps://github.com/RealityNet/iOS-Forensics-References/forks
Report repository https://github.com/contact/report-content?content_url=https%3A%2F%2Fgithub.com%2FRealityNet%2FiOS-Forensics-References&report=RealityNet+%28user%29
Releaseshttps://github.com/RealityNet/iOS-Forensics-References/releases
Packages 0https://github.com/orgs/RealityNet/packages?repo_name=iOS-Forensics-References
Please reload this pagehttps://github.com/RealityNet/iOS-Forensics-References
Contributorshttps://github.com/RealityNet/iOS-Forensics-References/graphs/contributors
Please reload this pagehttps://github.com/RealityNet/iOS-Forensics-References
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.