Metadata (Part 1): A Brief History
A history of metadata and where we go from here.
forensic_artifacts
Qemu Network Tunneling...?
While doing some things at work, I reviewed "Network tunneling with... QEMU?" by Secure List where QEMU is used for network tunneling similar to netcat, socat, or other utilities.
iOS Forensics: VMP4 File format
A look into iOS's VMP4 file format as decoded by Yogesh Khatri.
iOS Forensics: Data hidden within Map Cache Files
Part of my master's thesis for DFIR at Champlain College. Examining data hidden within map cache files.
iOS Forensics: iLEAPP updates
Updates to iLEAPP to add geolocations.