Blog

By: Sarah Edwards, Senior Digital Forensics Researcher While I was researching the Apple Notes application on macOS and iOS, I came across a peculiar scenarios where...

Today’s investigations often involve multiple machines and devices.  It can be time consuming to image and process several computers, external hard drives, and other media...

As Windows has evolved over time several artifacts have appeared that can highlight when programs or applications were executed, and which user executed them.  The...

By Stephanie Thompson, Solutions Engineer With the recent news of BlackBag joining Cellebrite, it seems like the appropriate time to share what we can already do...

Introduction Hello everyone! I’m Dr. Vico Marziale (@vicomarziale), Senior Digital Forensics Researcher here at BlackBag. In this installment, I’d like to start a series of posts...

By: Bruce Hunter, Senior Forensic Engineer With the release of macOS 10.12 Sierra, Apple introduced a new form of logging referred to as Unified Logs.  These...

By Stephanie Thompson, Solutions Engineer Using File Filters Data, data, and more data!!  With hard drives and mobile devices constantly increasing in size, investigators are always looking...

What is Missing from Logical Acquisitions? By: Tim Thorne, Solutions Engineer Over the past couple of weeks, I have attended several international events and customer meetings where...

By: Justin Matsuhara, Team Lead, Solutions Engineer & Stephanie Thompson, Solutions Engineer Depending on the digital forensic imaging tool you have available, creating a forensic image...

BlackBag’s Partnership With Berla Expands Your Analysis Environment In today’s investigations, it is now commonplace to have multiple digital devices associated to one case. As such,...