iPhone Forensics

When an iPhone is seized, measures should be taken to ensure that the maximum amount of data can be extracted from the device.  iPhone have...

With the release of BlackLight 2020 R1, BlackBag expanded the macOS artifacts processed.  By user request, features were added to process: AirDrop artifacts, built-in iCloud...

By: Sarah Edwards, Senior Digital Forensics Researcher While I was researching the Apple Notes application on macOS and iOS, I came across a peculiar scenarios where...

By Stephanie Thompson, Solutions Engineer With the recent news of BlackBag joining Cellebrite, it seems like the appropriate time to share what we can already do...

BlackBag’s Partnership With Berla Expands Your Analysis Environment In today’s investigations, it is now commonplace to have multiple digital devices associated to one case. As such,...

In the past few years there has been a lot of press surrounding the issue of distracted driving. With good reason, statistics show that in 2015...

Update: We have added instructions on how to create an encrypted backup password for an iOS 10 device with MDM profile using iTunes. iPhones and iPads being...

Last week one of our forensic analysts, Bruce Hunter, described the impact of iOS 10 on mobile forensics. In case you miss it, here is quick recap,...

Here's a common misconception that can lead to some frustration in iPhone and iPad investigations: What is a device's "encrypted backup password?" Is that simply...

Users who own devices that are unlocked from a carrier are able to change SIM cards from carrier to carrier. There are several ways in...