With iOS 27, Apple is using the Spotlight to shine on its Apple Intelligence features. So, in this episode of Mobile Unpacked, we're taking a deeper look at all the new changes that Apple's latest release brings to the forensic fold.

Over 60% of online traffic flows through mobile browsers—making them a critical source of evidence for forensic examiners.

A common theme in digital forensics is putting the target behind the keyboard. One way to help this is around the use of passcodes and especially the use of biometrics. How can we determine though wha...

iOS has long been known for only storing certain records for a fixed period of time. In some cases, artifacts may only be stored on device for a few days, and in others, never deleted without the user...

Apple has hit the jump to light speed and jumped from iOS 18 to iOS 26! In this episode of Mobile Unpacked we’ll explore the new changes and challenges Apple’s yearly upgrade cycle is bringing to the ...

The power of the ADB command protocol is instrumental in the forensic analysis of Android devices. In this episode of Mobile Unpacked we'll focus on learning the basics up to some advanced ADB command...

While multiple user-accounts are not a new thing with Android, they are gaining momentum in how much they are used. In addition to just secondary profiles and guest accounts, more and more services li...

Mobile Forensics is a constantly evolving field. While many of the roadblocks examiners face today are not new problems, there may be new solutions around them. In this episode we'll explore some of the biggest roadblocks in a mobile device investigation and discuss the ways you can navigate around those issues. Whether you're new to mobile or an old pro, this episode will explore the issues undoubtedly waiting for you in your workflows.

Android Auto, like Apple's CarPlay, is designed to seamlessly connect smartphones to vehicles. But what traces does it leave behind? In this episode of Mobile Unpacked, we'll examine the artifacts generated by Android Auto and explore the evidence they can reveal — from locations and messages to timestamps and user activity. We'll also look at where investigators can uncover additional context to help reconstruct events and develop a more complete picture of a user's actions. Join us to learn how vehicle-connected mobile activity can provide valuable investigative insights.

How many different ways are there to get Android data? What’s the difference between agent-based extractions and ADB acquisitions?

Many of us stay connected to our digital lives even while driving thanks to connections such as CarPlay and Android Auto. In this episode, we’ll explore artifacts left behind on the device that shows the connection to the vehicle and help you identify traces of the vehicles path, speed, and other important investigative details. 

Have you ever needed to use Download Mode or Fastboot Mode but weren’t quite sure what they are or when to use them? Or encountered a device in Lost, Disabled, or Lockdown mode and wondered what was happening under the hood? In this session, we’ll explore the various operating modes available across iOS and Android, along with related protection features such as iOS Stolen Device Protection and Android Advanced Protection Mode. We’ll discuss how these modes and safeguards impact digital investigations — when they can enable access, when they create hurdles, and how they introduce...

When Star Trek gave us a glimpse of the future with the Universal Translator it seemed like a far-off science-fiction. However, newer features of mobile operating systems have made this more science-fact.

Both iOS and Android are known to keep multiple copies of certain data, but the reason why isn't always the same. Not all copies are created equal! In this episode of Mobile Unpacked, we will explore why data gets duplicated across both iOS and Android and how those duplicates can be ignored or crucial to your investigation.

Mobile apps are central to how users interact with their devices—and they leave behind a rich trail of forensic evidence. In this episode of Mobile Unpacked, we’ll explore the full lifecycle of an app...

A common theme in digital forensics is putting the target behind the keyboard. One way to help this is around the use of passcodes and especially the use of biometrics. How can we determine though wha...

To ensure you continue to get the critical mobile insights needed for your investigations, Magnet Forensics is proud to announce Magnet Graykey and Verakey support for Apple iOS 26!

Apple has hit the jump to light speed and jumped from iOS 18 to iOS 26! In this episode of Mobile Unpacked we’ll explore the new changes and challenges Apple’s yearly upgrade cycle is bringing to the…

With Android 16 now released to the Google Pixel device family, it's time to take a look at another sweet treat codenamed version of Android. This version is less about artifacts and more about…

How many different ways are there to get Android data? What’s the difference between agent-based extractions and ADB acquisitions?

With major mobile operating systems incorporating artificial intelligence into base functions and third-party applications, it’s time to explore what artifacts are available. In this episode of Mobile...

In the Dreamworks film Shrek, the titular character said that 'Ogres are like onions. They have layers.' Well, Apple isn't so different from the green hero in that their lovable monster, iOS also feat...