Ubiquity Forensics – Your iCloud and You @ BSidesNoLA
The latest version of this presentation is available in the Resources section of this website.Enjoy! Continue reading Ubiquity Forensics – Your iCloud and You @ BSidesNoLA
Author Archives: Sarah Edwards
Ubiquity Forensics – Your iCloud and You @ BSidesNoLA
The latest version of this presentation is available in the Resources section of this website.Enjoy! Continue reading Ubiquity Forensics – Your iCloud and You @ BSidesNoLA
Ubiquity Forensics – CEIC 2015
Click here for the newest presentation slides from CEIC 2015.I hope I’ll be seeing some of you bright and early at the 9am presentation! Continue reading Ubiquity Forensics – CEIC 2015
Ubiquity Forensics – CEIC 2015
Click here for the newest presentation slides from CEIC 2015.I hope I’ll be seeing some of you bright and early at the 9am presentation! Continue reading Ubiquity Forensics – CEIC 2015
Apple Watch Forensics – A Quick Preview
Heather Mahalik and I had the pleasure of presenting a quick rundown of what we found in iOS backups for the brand spankin’ new Apple Watches that we just got. (BTW – Yes, I’m loving it. Big surprise there!)We presented this last week as SANS Security … Continue reading Apple Watch Forensics – A Quick Preview
Apple Watch Forensics – A Quick Preview
Heather Mahalik and I had the pleasure of presenting a quick rundown of what we found in iOS backups for the brand spankin’ new Apple Watches that we just got. (BTW – Yes, I’m loving it. Big surprise there!)We presented this last week as SANS Security … Continue reading Apple Watch Forensics – A Quick Preview
HFS+ Grammar Updates – Now with Windows & Linux Support!
Updated HFS+ Grammars:
My Synalyze It! HFS+ grammars have been updated thanks to some feedback from ‘Cugu’ who pointed out an error in the Reserved Field in the Header Record. It should have been 4×16 bytes, not just 4 bytes. Thanks ‘Cugu’! The updated grammars can be accessed in the Resources Section.
Windows & Linux Support:
Windows and Linux support for the Synalyze It! Grammars are now available by using Hexinator by the same creator as Synalyze It! This program appears to be free as of this writing. Hexinator works and feels just like Synalyze It!
An example of Hexinator with my HFS+ Catalog File Grammar.
Continue reading HFS+ Grammar Updates – Now with Windows & Linux Support!