Blog Posts
Locations, Locations, Locations
Author : Ian Whiffin
Date : 18th July 2020
A detailed look at Location data. How it is obtained and how accurate it is.

Tap here to read full blog post

Favicons
Author : Ian Whiffin
Date : 7th June 2020
A look at how Favicons may be useful to your investigation.

Tap here to read full blog post

CheckRa1n
Author : Ian Whiffin & Shafik G. Punja
Date : 16th April 2020
A look at extracting iOS devices into a TAR archive using ios_bfu_triage.

Tap here to read full blog post

Primary Key / Date Stamp Fallacy
Author : Ian Whiffin
Date : 4th April 2020
A brief look at missing records within communication databases.

Tap here to read full blog post

iOS Mail
Author : Ian Whiffin
Date : 29th March 2020
A dive into the standard email client on iOS devices.

Tap here to read full blog post

So Long Lockdown!
Author : Ian Whiffin
Date : 8th February 2020
The end of Lockdown.log; A quick post to say goodbye.

Tap here to read full blog post

Apple Pay Transactions
Author : Ian Whiffin
Date : 8th February 2020
Extracting Apple Pay Transactions from an iPhone (and Watch)

Tap here to read full blog post

A Hundred Million TimeStamps
Author : Ian Whiffin
Date : 27th Jan 2020
A look at a large number of different TimeStamp formats in use.
Gives examples of what each timestamp looks like, describes how to convert it to a human readable format and provides a calculator to work them out.

Tap here to read full blog post

7bit PDU (GSM-7)
Author : Ian Whiffin
Date : 25th November 2019
A look at 7bit PDU - an important but often overlooked encoding method for SMS Messages. This came about a couple of years ago when a phone I had to examine had messages live on screen that my forensics tool couldn't find. After researching 7bit PDU I was able to manually recover over 500 SMS important to the case.

Tap here to read full blog post

SnapChat PList
Author : Ian Whiffin
Date : 23rd October 2019
A deconstruction of SnapChat's chatConversationStore.plist file (Hint:It's not a PList).

Tap here to read full blog post

PList Decoding
Author : Ian Whiffin
Date : 23rd October 2019
A look at how Binary PLists store data and how to manually decode them.

Tap here to read full blog post

KnowledgeC (and Friends)
Author : Ian Whiffin
Date : 23rd October 2019
KnowledgeC is a common database in recent iOS Versions that holds a wealth of information. This is far from the first time it's been written about, but it ties in perfectly with some software I've been working on and seemed like a nice article for my first blog.

Tap here to read full blog post

Welcome to DoubleBlak.com!
Author : Ian Whiffin
Date : 23rd October 2019
A little bit about me and my new website. Why I did it and what you can expect to find here.

Tap here to read full blog post