Walking the Android (time)line. Using Android’s Digital Wellbeing to timeline Android activity.

Each time I have created an Android image I have found something new. Google Assistant and Android Auto were results of Nougat and Oreo, and the changes I found in Google Assistant were a result of Android Pie. Android 10 is no exception. While poking around the OS during the data generation period I found … Continue reading Walking the Android (time)line. Using Android’s Digital Wellbeing to timeline Android activity.

Wickr. Alright. We’ll Call It A Draw.

Portions of this blog post appeared in the 6th issue of the INTERPOL Digital 4n6 Pulse newsletter.  I would like to thank Heather Mahalik and Or Begam, both of Cellebrite, who helped make the Android database portion of this blog post possible, and Mike Williamson of Magnet Forensics for all the help with the underpinnings … Continue reading Wickr. Alright. We’ll Call It A Draw.

Two Snaps and a Twist – An In-Depth (and Updated) Look at Snapchat on Android

 There is an update to this post. It can be found after the 'Conclusion' section.I was recently tasked with examining a two-year old Android-based phone which required an in-depth look at Snapchat. One of the things that I found most striking (and frustrating) during this examination was the lack of a modern, in-depth analysis of … Continue reading Two Snaps and a Twist – An In-Depth (and Updated) Look at Snapchat on Android

Google Search Bar & Search Term History – Are You Finding Everything?

Search history.  It is an excellent way to peer into someone’s mind and see what they are thinking at a particular moment in time.  In a court room, search history can be used to show intent (mens rea).  There are plenty of examples where search history has been used in court to establish a defendant’s … Continue reading Google Search Bar & Search Term History – Are You Finding Everything?