Ian Whiffin

DoubleBlak Digital Forensics is a Digital Forensics web site aimed at helping forensic examiners find and present best evidence.

It is maintained by a Ian Whiffin, a Law Enforcement Officer / Digital Forensics Examiner with a mid-sized municipal police agency.

With over twenty years experience in IT, 15 years in Policing (split between Canada and the UK) and just over 6 years in Digital Forensics, Ian has been qualified as a Subject Matter Expert in court numerous times and has a wealth of experience in the examination of computers, cell phones and other digital devices using not only a range of vendor tools but has created software tools to fill the gaps left by vendors. Many of these tools will be made available for free in the Software section of this site (Requires authentication).

Ian is trained with numerous forensic software tools related to mobile devices and computers and is also trained in JTAG, ChipOff, ISP, Visual NAND Reconstructor and enjoys tinkering with Hardware Reverse Engineering. He has been writing his own software for many years using numerous different languages including C#, VB, Obj-C, ASP, PHP, Python and Javascript.

Blog Posts
Blog posts written by myself or guest bloggers.

The blogs focus on exploring and explaining new or existing forensic techniques or artifacts found on a variety of devices.
Links
A collection of links including other Blog sites, Articles & Resources.
Software
A collection of free tools to assist with your cases.

Access to the downloads section requires authentication.

Click here to log on
GroupThink
A place to come together and collectively solve problems.

Post whatever details you can to share with the group and benefit from the experience of the collective forensic community.

 

Blog Posts

SnapChat PList
Ian Whiffin - 23rd October 2019

A deconstruction of SnapChat's chatConversationStore.plist file (Hint:It's not a PList).

Click here to read the full blog post

PList Decoding
Ian Whiffin - 23rd October 2019

A look at how Binary PLists store data and how to manually decode them.

Click here to read the full blog post

KnowledgeC (and Friends)
Ian Whiffin - 23rd October 2019

KnowledgeC is a common database in recent iOS Versions that holds a wealth of information. This is far from the first time it's been written about, but it ties in perfectly with some software I've been working on and seemed like a nice article for my first blog.

Click here to read the full blog post

Welcome to DoubleBlak.com!
Ian Whiffin - 23rd October 2019

A little bit about me and my new website. Why I did it and what you can expect to find here.

Click here to read the full blog post


More Blog Posts...
Software

You need to authenticate in order to access the software section.

Authentication is free and easy and is a *most likely feable* attempt to stop the tools from getting into the hands of anybody outside of the forensic community.

Begin Authentication
GroupThink

More than just a forum to share pin-outs and links; GroupThink is designed as a place to collectively come together to solve the big problems. Propriatary Operating System? Rare/Unknown application? New hardware? These are just some of the types of things this area is designed for.

More Information...



Home Blog Links Software GroupThink