Ian Whiffin

DoubleBlak Digital Forensics is a Digital Forensics web site aimed at helping forensic examiners find and present best evidence.

It is maintained by a Ian Whiffin, a Law Enforcement Officer / Digital Forensics Examiner with a mid-sized municipal police agency.

With over twenty years experience in IT, 15 years in Policing (split between Canada and the UK) and just over 6 years in Digital Forensics, Ian has been qualified as a Subject Matter Expert in court numerous times and has a wealth of experience in the examination of computers, cell phones and other digital devices using not only a range of vendor tools but has created software tools to fill the gaps left by vendors. Many of these tools will be made available for free in the Software section of this site (Requires authentication).

Ian is trained with numerous forensic software tools related to mobile devices and computers and is also trained in JTAG, ChipOff, ISP, Visual NAND Reconstructor and enjoys tinkering with Hardware Reverse Engineering. He has been writing his own software for many years using numerous different languages including C#, VB, Obj-C, ASP, PHP, Python and Javascript.

Blog Posts
Blog posts written by myself or guest bloggers.

The blogs focus on exploring and explaining new or existing forensic techniques or artifacts found on a variety of devices.
Links
A collection of links including other Blog sites, Articles & Resources.
Software
A collection of free tools to assist with your cases.

Access to the downloads section requires authentication.

Click here to log on
GroupThink
A place to come together and collectively solve problems.

Post whatever details you can to share with the group and benefit from the experience of the collective forensic community.

 

Blog Posts

So Long Lockdown!
Ian Whiffin - 8th February 2020

The end of Lockdown.log; A quick post to say goodbye.

Click here to read the full blog post

Apple Pay Transactions
Ian Whiffin - 8th February 2020

Extracting Apple Pay Transactions from an iPhone (and Watch)

Click here to read the full blog post

A Hundred Million TimeStamps
Ian Whiffin - 27th Jan 2020

A look at a large number of different TimeStamp formats in use.
Gives examples of what each timestamp looks like, describes how to convert it to a human readable format and provides a calculator to work them out.

Click here to read the full blog post

7bit PDU (GSM-7)
Ian Whiffin - 25th November 2019

A look at 7bit PDU - an important but often overlooked encoding method for SMS Messages. This came about a couple of years ago when a phone I had to examine had messages live on screen that my forensics tool couldn't find. After researching 7bit PDU I was able to manually recover over 500 SMS important to the case.

Click here to read the full blog post


More Blog Posts...
Software

You need to authenticate in order to access the software section.

Authentication is free and easy and is a *most likely feable* attempt to stop the tools from getting into the hands of anybody outside of the forensic community.

Begin Authentication
GroupThink

More than just a forum to share pin-outs and links; GroupThink is designed as a place to collectively come together to solve the big problems. Propriatary Operating System? Rare/Unknown application? New hardware? These are just some of the types of things this area is designed for.

More Information...



Home Blog Links Software GroupThink