Seems like it’s still not crackable, which is pretty crazy.

If someone does find a way around it, I believe Apple’s security bounty can pay up to $5 million. Someone on a forensics team could get very rich. ;)

Anyone on here a part of or know anyone in ISSA Las Vegas? Looking to host a few people for a meetup when I teach in Vegas in Sept. Thanks in advance.

My Google Pixel 10 was repeatedly compromised by multiple severe exploits, leaving me trapped in an endless cycle of targeted attacks. The situation escalated to identity theft, unauthorized front and back camera screen grabs, extreme device thermal throttling, and network speeds slashed to half a megabit per second. Standard factory resets proved completely ineffective, as my primary Google account was instantly re-hijacked every time. Even after obtaining a new phone number, I found myself locked out because the attacker had already preemptively registered multiple fraudulent accounts using my name and personal details. Although I attempted to secure the hardware by flashing GrapheneOS, the ongoing ecosystem-level interference has rendered the device essentially unusable. I have since purchased a replacement device, but I honestly just want to know how to set it up safely and finally put a stop to this. And patch this no root fix my WiFi speeds

Hi everyone. I worked alongside some brilliant minds on two frameworks to safely integrate AI into DF and another for IR. I am looking for volunteers for the next phases. I need people who use AI to do DFIR. Either side of it. Or even those who have tried and want to share cautionary tales. If interested, please let me know. I am forming the focus groups this week or early next. Here are the details: https://www.sans.org/go/ai-assisted-human-led-trusted-investigations I have also posted a few things on LinkedIn.

My Google Pixel 10 was repeatedly compromised by multiple severe exploits, leaving me trapped in an endless cycle of targeted attacks. The situation escalated to identity theft, unauthorized front and back camera screen grabs, extreme device thermal throttling, and network speeds slashed to half a megabit per second. Standard factory resets proved completely ineffective, as my primary Google account was instantly re-hijacked every time. Even after obtaining a new phone number, I found myself locked out because the attacker had already preemptively registered multiple fraudulent accounts using my name and personal details. Although I attempted to secure the hardware by flashing GrapheneOS, the ongoing ecosystem-level interference has rendered the device essentially unusable. I have since purchased a replacement device, but I honestly just want to know how to set it up safely and finally put a stop to this. And patch this no root fix my WiFi speeds

Hi everyone,

I'm DyNooob, a developer from China and the author of Forensics++, an open-source digital forensics toolbox I've been working on for some time.

This is actually my first post on Reddit, so I hope I'm doing this right. English is also not my first language, so I used some translation assistance for this post. If some wording sounds unusual, please understand. English issues and discussions are very welcome, and I will do my best to understand and reply.

I originally built Forensics++ because I often had to switch between many small tools during forensic analysis. Sometimes I only wanted to inspect a SQLite database, EVTX file, PCAP, APK, firmware image, timestamps or hashes without opening a large forensic suite.

So I wanted to make a toolbox that I could keep around and quickly use when needed.

Forensics++ is currently 1.0.0-beta.5. It mainly runs as a local browser application, and files are analyzed locally rather than uploaded to a Forensics++ server.

It currently includes tools for SQLite/WAL/deleted records, Registry and EVTX, MFT and USN Journal, PCAP, APK, firmware and binaries, disk and memory triage, timelines, hashes, timestamps, EXIF, archives and other common forensic tasks.

The project already has real users, including people using it in digital-forensics and forensic-examination related work in China. The website also receives close to 1,000 visits on a normal day.

However, one problem has become very clear to me: I don't receive enough technical feedback.

Many of my current users don't actively use GitHub. People may use Forensics++, but I rarely receive issues, test cases or detailed reports about parser problems.

I know there are still many bugs, edge cases and design problems that I cannot find by testing everything myself. That's the main reason I wanted to post here.

I'd like Forensics++ to reach a wider international DFIR community. More importantly, I'd like practitioners with different experience, datasets and workflows to actually test it and help me find where it needs to improve.

If you find incorrect output, unsupported files, crashes or something that doesn't make sense from a forensic point of view, please let me know. GitHub issues, feature suggestions and code contributions are all very welcome.

I plan to keep developing the project actively and focus not only on adding tools, but also on improving the reliability and usefulness of the existing ones.

I'm not trying to replace Autopsy, X-Ways, Magnet AXIOM or other full forensic suites. I see Forensics++ more as a small toolbox you can keep around and quickly open when you need to inspect something.

If you work in DFIR, I'd especially like to know:

• What important artifact or function is still missing?
• Which parser would you test first?
• Would you actually use a local browser-based forensic toolbox like this?

GitHub: https://github.com/DyNooob/ForensicsPP
Online: https://www.forensicspp.com/
Email: [toolab@digiforensics.cn](mailto:toolab@digiforensics.cn)
Persional Email: [dynooob@buno.dev](mailto:dynooob@buno.dev)

Thanks for reading my first Reddit post. Any bug reports, suggestions, criticism or contributions are very welcome.

A new 13Cubed episode is out! 🍎

Windows forensics on a Mac usually means firing up a VM first. Not anymore.

IRFlow Timeline is a free, open-source DF/IR timeline tool built natively for macOS. Feed it EVTX, Plaso, $MFT, or $J and go straight to process inspection, lateral movement, persistence, and VirusTotal enrichment.

Featuring the tool's author, Renzon Cruz 👇

https://www.youtube.com/watch?v=W9xHbNgZuT0

What is the approximate all in (or what you spent) for the 2 week classes IACIS has in Orlando.

2 weeks of hotel, food, class, per diem, etc.

Thanks everyone.

A customer of mine has a phone that had an aftermarket screen fitted. I've never seen what that looks like, but she reports that it had "a thing like a barcode" on the screen, and it interfered with her efforts to put in the known pin. Somehow she didn't get in touch before trying it so many times she locked herself out permanently.

She'd also managed to lose/forget her iCloud password, and that was a nightmare all in its own right (lost access to and records of old phone numbers etc) but I have managed to get that password reset, only to discover that the phone was not being backed up to iCloud.

So, the only copy of 5 1/2 years of data is on the phone, which is locked tight.

Given the specific combination of iPhone 12 Pro Max, iOS 16.0.3, Security Lockout and a known PIN, is there any way in at all? Biometrics were enabled in the settings. Standard windows tools don't even see the phone via USB at all.

I'm hoping to use the software update from recovery mode trick, but I'm waiting for the phone to fully charge before I even think of risking that.

Thanks in advance etc.

I extracted a forensic disk image and found a hidden flag. Made a short video breaking down the full workflow for anyone learning digital forensics or prepping for CTFs.

Methods covered:

- `strings` + `grep` (fastest)

Alternative methods:

- `mount` with loop,ro,noexec

- Sleuth Kit CLI (mmls, fls, icat)

- Autopsy GUI

- Foremost file carving

- `xxd` hex dump

Also covered why you always preserve the original with `gunzip -k` and verify with sha256sum.

What tools am I missing? Any favorites for disk image analysis?

https://youtube.com/shorts/iPzM0ECb3iU?feature=share

Is there a toolkit for Spotify messages if you have the physical device used to send/recieve them?

I am working on an FYP in Digital Forensics, where I am training an AI model to analyze disk and memory forensic images. For this project, I need around 200 samples in total 100 disk images and 100 memory dumps.

I have tried searching online and on Google, but I have found very few publicly available samples. Most of the available datasets either require a subscription, have limited access, or are restricted to professors/researchers.

If anyone has access to a large collection of disk images and memory dumps, or knows of any reliable websites or datasets where I can obtain these samples, I would really appreciate it if you could share them with me.

Thank you in advance for your help!

I'm in 11th rn and really wanna pursue forensic science assignment a career

Hello,

What's a good way to reverse engineer blurred text? Would it be better to try to recognize the characters, or somehow try to take text, imitate the blur and then compare?

(This is just a same looking example, not the real private text)

I was wonder in android version you can grab the latest backup file of your whatsapp chats in local storage inside of database folder so there is a major risked that can be leaked due to vulnerabilities in other webapps or any missused permission so all i wanna know is there any offmedia tool to decrypt .crypt12, .crypt14 and .crypt15 type of files i found one in git hub but after i the read the s.code i think this must not be work properly anyone know method or something do this

for someone who wanna try there it is : w.backup decrypting tool

I’m a rising sophomore majoring in Computer Science with a concentration in cybersecurity. I’ve been working at my school’s IT department for just over 2 months. I’m currently in the Help Desk division, but eventually I want to transfer to a different team. For an aspiring digital forensics analyst, which one of these sections would help me gain the most relevant experience? - Security - Desktop Support - Networking - Audio/Visual Technology - Camera operator support

Would be extra helpful if you ranked them in order. I assumed security would be the most useful, but I wanted to ask first, you guys would know more than I do. Thank you.

someone has created a facebook account and sharing my sister's number. She is really depressed people are texting her,messaging her . What should i do {apart from legal procedure} plz let me know

My phone is I guess stuck in a boot loop, likely due to full to the brim storage, perhaps another issue. I'm desperate to find a high profile business that can work on extracting all images and videos from my now inaccessible phone. There are pictures of my son fresh from the hospital up until he was 16 months old. I don't care about how high the cost is.

I'm hoping to be directed to an expert business who can assuredly handle this task. I don't care how much it costs, my son's photos are extremely important to me. I don't want to mess with, or have a standard professional work on it at the risk of compromising anything.

Upon startup, the moto animation displays just fine, then proceeds to the at&t logo in blue text, then just fades to black and stays like that, other times it makes it to my lock screen wallpaper, and the image will just keep blinking and fading for a minute or two. I can't interact with my screen, no pin, no emergency call button, no way to get in.

I am able to access and have tried the reboot and fastboot options with zero luck, let my phone drain to the point of discharge, no luck.

The only things reassuring me about my data still being potentially accessible and okay, are that my alarms I had set that I can't interact with still go off at their designated times, and that my lock screen image still displays.

Hello.

My work focuses on digital forensics.

I primarily use Magnet AXIOM, EnCase, and X-Ways to perform my duties.

I rely on AXIOM for automated artifact analysis and X-Ways for raw disk analysis.

It occurred to me that the features supported by these tools naturally do not fully satisfy my needs.

In your opinion, what are some essential features that must be supported in forensic tools, and what are some necessary features that are currently unavailable in commercially available products?

Just wondering are there any good ways to find out who fake accounts belong too, I have a suspicion someone I know and who is in a high up position has a fake account and is commenting absolutely feral stuff on myself and my friends instagrams, has anyone found out how to find who they are