💬 Messages
📃 Feed posts
👥 Actors
🔎 Searches
📄 Posts
🔗 Get ALEAPP here: https://buff.ly/3Px6B1L
#DigitalForensics #DFIR
💬 Messages
📃 Feed posts
👥 Actors
🔎 Searches
📄 Posts
🔗 Get ALEAPP here: https://buff.ly/3Px6B1L
#DigitalForensics #DFIR
💬 Parses messages, actors, feed, and follows.
⏰ Hope to be done with most before Thursday's Digital Forensics Now Podcast stream (@dfnpodcast.bsky.social)
#DigitalForensics #MobileForensics #DFIR #WillDemoLiveOnStream
💬 Parses messages, actors, feed, and follows.
⏰ Hope to be done with most before Thursday's Digital Forensics Now Podcast stream (@dfnpodcast.bsky.social)
#DigitalForensics #MobileForensics #DFIR #WillDemoLiveOnStream
Forensic Kit - exterro.com/forensic-toolkit
Autopsy - autopsy.com
Volatility - volatilityfoundation.org
Zimmerman - ericzimmerman.github.io/#lindex.md
Wireshark - wireshark.org
iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP
github.com/abrignoni/aLEAPP
Klogg - klogg.filimonov.dev
Forensic Kit - exterro.com/forensic-toolkit
Autopsy - autopsy.com
Volatility - volatilityfoundation.org
Zimmerman - ericzimmerman.github.io/#lindex.md
Wireshark - wireshark.org
iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP
github.com/abrignoni/aLEAPP
Klogg - klogg.filimonov.dev
🙏 Thanks @johann-plw.bsky.social & John Hyla for being MVPs today.
🌋 iLEAPP artifacts with LAVA support.
🦋 ALEPP artifacts for Bluesky.
💻 Binaries for Mac Intel, Apple Silicon, Ubuntu, & Windows.
🔗 iLEAPP: https://buff.ly/3ASBMDg
🔗 ALEAPP: https://buff.ly/3OmaUPj
🙏 Thanks @johann-plw.bsky.social & John Hyla for being MVPs today.
🌋 iLEAPP artifacts with LAVA support.
🦋 ALEPP artifacts for Bluesky.
💻 Binaries for Mac Intel, Apple Silicon, Ubuntu, & Windows.
🔗 iLEAPP: https://buff.ly/3ASBMDg
🔗 ALEAPP: https://buff.ly/3OmaUPj
Current tools are missing a lot of data from these Private Spaces. Notice how #ALEAPP parses it out.
#MobileForensics
Current tools are missing a lot of data from these Private Spaces. Notice how #ALEAPP parses it out.
#MobileForensics
📱#iLEAPP: github.com/abrignoni/iL...
🤖#ALEAPP: github.com/abrignoni/AL...
They are #python based #opensource community tools for #mobileforensics.
📱#iLEAPP: github.com/abrignoni/iL...
🤖#ALEAPP: github.com/abrignoni/AL...
They are #python based #opensource community tools for #mobileforensics.
New calendar versioning, the LAVA migration essentially complete, Tabler icons, and fresh parsers: Oura Ring, Zalo, Home Depot, HONOR, Samsung Secure Folder, plus new conversation views.
🔗 leapps.org/releases
#DFIR #MobileForensics
New calendar versioning, the LAVA migration essentially complete, Tabler icons, and fresh parsers: Oura Ring, Zalo, Home Depot, HONOR, Samsung Secure Folder, plus new conversation views.
🔗 leapps.org/releases
#DFIR #MobileForensics
The new C2PA Content Provenance artifact reads AI provenance two ways:
🧬 C2PA Content Credentials
🏷️ IPTC Digital Source Type (XMP)
🐍 Pure Python
Merged now, run from source today. 🔗 leapps.org/blog-post?po...
#DFIR #FLOSS #DigitalForensics
The new C2PA Content Provenance artifact reads AI provenance two ways:
🧬 C2PA Content Credentials
🏷️ IPTC Digital Source Type (XMP)
🐍 Pure Python
Merged now, run from source today. 🔗 leapps.org/blog-post?po...
#DFIR #FLOSS #DigitalForensics
iLEAPP: Apple Unified Logs bundled in every build ALEAPP: Signal with full SQLCipher decryption DLEAPP: Roblox and Telegram Desktop
leapps.org/releases
iLEAPP: Apple Unified Logs bundled in every build ALEAPP: Signal with full SQLCipher decryption DLEAPP: Roblox and Telegram Desktop
leapps.org/releases
Look for the audio only version on all podcasting platforms after the live show.
Listen on your browser here:
digitalforensicsnow.buzzsprout.com
Look for the audio only version on all podcasting platforms after the live show.
Listen on your browser here:
digitalforensicsnow.buzzsprout.com
🪵 SQLite database contains a log of items requested be moved in or out of the secure folder in Samsung Android devices.
👏 Thanks to HSI Digital Forensics Examiner Geovanny Perez for the discovery of this artifact.
#DFIR
🚨 Airtag Alerts
📶 Airtag Scans
👁️ Passive Scanning State
⏳ Last Scan Timestamp
🙏 Thanks to @joshhickman.bsky.social for his diligent research
🔗 Read his blog-post here: https://thebinaryhick.blog/2023/08/13/android-airtags-part-ii/
🚨 Airtag Alerts
📶 Airtag Scans
👁️ Passive Scanning State
⏳ Last Scan Timestamp
🙏 Thanks to @joshhickman.bsky.social for his diligent research
🔗 Read his blog-post here: https://thebinaryhick.blog/2023/08/13/android-airtags-part-ii/
🆕 Added and updated artifacts for #Android extractions.
🔗 github.com/abrignoni/AL...
#DigitalForensics #MobileForensics #DFIR
🆕 Added and updated artifacts for #Android extractions.
🔗 github.com/abrignoni/AL...
#DigitalForensics #MobileForensics #DFIR
One Python file. The framework handles the rest.
Covers structure, SQLite/plist parsing, timestamps, LAVA conversation view, and a full working example.
👉 leapps.org/blog-post?po...
One Python file. The framework handles the rest.
Covers structure, SQLite/plist parsing, timestamps, LAVA conversation view, and a full working example.
👉 leapps.org/blog-post?po...
🔖Bookmarks
⭐Favorite Sites
🌐Web Browser History
📑Open Tabs
📌Updates to Tab Thumbnails
Big thanks to Damien Attoe for the contributions! #DFIR
Download 🔗: github.com/abrignoni/AL...
🔖Bookmarks
⭐Favorite Sites
🌐Web Browser History
📑Open Tabs
📌Updates to Tab Thumbnails
Big thanks to Damien Attoe for the contributions! #DFIR
Download 🔗: github.com/abrignoni/AL...
We have reached out to the researchers to see if and when the parser can be merged to #ALEAPP. Good stuff.
www.researchgate.net/publication/...
We have reached out to the researchers to see if and when the parser can be merged to #ALEAPP. Good stuff.
www.researchgate.net/publication/...
Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp and Chrome payments landed on both sides in the same release.
Plus DuckDuckGo absent columns now read empty instead of "No". Absence is not a finding.
leapps.org/releases
Snapchat, Tinder, TikTok, Reddit, Proton Mail, WhatsApp and Chrome payments landed on both sides in the same release.
Plus DuckDuckGo absent columns now read empty instead of "No". Absence is not a finding.
leapps.org/releases
🙏 Thanks to Ricardo Santos for contributing this awesome artifact.
✅ Check out Ricardo's social media presence here👇
LinkedIn: www.linkedin.com/in/ricardo-s...
⤵️ Get the LEAPPs and LAVA here: www.leapps.org/releases
#DeepSeek #LLM #DFIR
🙏 Thanks to Ricardo Santos for contributing this awesome artifact.
✅ Check out Ricardo's social media presence here👇
LinkedIn: www.linkedin.com/in/ricardo-s...
⤵️ Get the LEAPPs and LAVA here: www.leapps.org/releases
#DeepSeek #LLM #DFIR
🖥 Developer of open-source tools for digital forensics (iLEAPP, ALEAPP, & RLEAPP.)
⚙️ Get them: github.com/abrignoni
📱 Digital forensics examiner specializing in mobile forensics
🔊 Public speaker on cybersecurity and digital investigations
🃏 Certified Digital Forensics Memer
🖥 Developer of open-source tools for digital forensics (iLEAPP, ALEAPP, & RLEAPP.)
⚙️ Get them: github.com/abrignoni
📱 Digital forensics examiner specializing in mobile forensics
🔊 Public speaker on cybersecurity and digital investigations
🃏 Certified Digital Forensics Memer
Run a parser and lose track of the output folder? LAVA now shows your recent iLEAPP, ALEAPP, RLEAPP, and VLEAPP runs right on the welcome screen. Opt-in by design.
Nice work by the awesome James Habben.
leapps.org/blog-post?post=feature-leapps-recent-run-history
Run a parser and lose track of the output folder? LAVA now shows your recent iLEAPP, ALEAPP, RLEAPP, and VLEAPP runs right on the welcome screen. Opt-in by design.
Nice work by the awesome James Habben.
leapps.org/blog-post?post=feature-leapps-recent-run-history