What if an App is Not Supported?

Recorded On: 10/02/2020

Not all is lost if an application is not supported by the black box approach (AKA the Get Evidence Button).  With the lion’s share of mobile devices being either Android or iOS around the world there is hope; data storage.  With data being stored in SQLite databases, Property Lists, Log Files, and other settings and investigator often has all the information at their finger tips.  Understanding the storage principles of these files, along with what can be harvested can make a rockstar out of any investigator.  Now you can become the forensic tool and uncover app data that has not been yet supported by any digital forensic company.

Keith Lockheart

Director of Training

Oxygen Forensics, Inc.

   Keith Lockhart serves as the Director of Training for Oxygen Forensics, Inc. in Alexandria, VA (U.S.A). In that capacity, he provides training vision and curriculum continuity to the Oxygen Forensics user base while generating courses with customer success as their main focus. After 20 years in the DFIR education industry, Keith is globally recognized as an instructor, SME and peer who might not know the answer but will certainly help you find it!

Key:

Complete
Failed
Available
Locked
What if an App is Not Supported?
Open to view video.
Open to view video. Description: Not all is lost if an application is not supported by the black box approach (AKA the Get Evidence Button). With the lion’s share of mobile devices being either Android or iOS around the world there is hope; data storage. With data being stored in SQLite databases, Property Lists, Log Files, and other settings and investigator often has all the information at their finger tips. Understanding the storage principles of these files, along with what can be harvested can make a rockstar out of any investigator. Now you can become the forensic tool and uncover app data that has not been yet supported by any digital forensic company.
You must register to access.