Season 1

Episode 1: New Beginnings

Published 24th May 2022
https://anchor.fm/4n6reformatted/episodes/Episode-1-New-Beginnings-e1ita0s

---

Overview

Join Phil & Adam for Episode 1 of 4n6Reformatted, in the first episode they discuss some of the latest industry news for DFIR.

---

Industry News Links

Release of the File Format Handbook - FORMOBILE:

• https://library.oapen.org/handle/20.500.12657/54441
• https://link.springer.com/book/10.1007/978-3-030-98467-0
• https://doi.org/10.1007/978-3-030-98467-0_8
• https://www.amazon.co.uk/Mobile-Forensics-Handbook-Formats-Systems/dp/3030984664/

Handy DFIR Excel Formulas - Angry-Bender

• https://angry-bender.github.io/blog/Handy-Excel-Formulas/

Azure Virtual Machine Execution Techniques - Hausec

• https://hausec.com/2022/05/04/azure-virtual-machine-execution-techniques/

iPhone Setup for Reversing and Debugging

• https://naehrdine.blogspot.com/2022/05/iphone-setup-for-reversing-and-debugging.html

Mobile Device Biometrics – What They Are and How They Work - Grayshift (@GrayshiftLLC)

• https://www.grayshift.com/mobile-device-biometrics-what-they-are-and-how-they-work/

What Apple Maps Activity Can be Found Using a Logical Extraction - Lord Templar

• https://lordtemplar1.wordpress.com/2022/05/08/what-apple-maps-activity-can-be-found-using-a-logical-extraction/

Cellebrite Capture the Flag – May 2022 - Heather Mahalik (@HeatherMahalik)

• https://cellebrite.com/en/cellebrite-capture-the-flag-may-2022/

Magnet CTF Part 2 Virtual Summit - First FFS iOS 15 image - Jessica Hyde (@B1N2H3X)

• https://twitter.com/B1N2H3X/status/1527286604355710977

NTFS cheatsheet for “Anatomy of an NTFS File Record” associated to their new episode - 13Cubed (@13CubedDFIR)

• https://www.13cubed.com/downloads/ntfs_file_record.pdf

iOS Photos SQLITE query documentation – The Forensic Scooter (@Scooter3347)

• https://theforensicscooter.com/2022/05/02/photos-sqlite-query-documentation-notable-artifacts/
• https://github.com/ScottKjr3347/iOS_Photos.sqlite_Queries

iOS Location Services and System Services ON or OFF? – The Forensic Scooter (@Scooter3347)

• https://theforensicscooter.com/2021/09/20/ios-location-services-and-system-services-on-or-off/

Peeking at User Notification Events in iOS 15 - 4n6 Ninja

• https://gforce4n6.blogspot.com/2022/05/peeking-at-user-notification-events-in.html?m=1

Decrypting Mega’s megaprefences Sqlite Database – AskClees

• https://askclees.com/2022/05/10/decrypting-megas-megaprefences-sqlite-database/

Decrypting Mega Preferences (Part 2) - AskClees

• https://askclees.com/2022/05/23/decrypting-mega-preferences-part-2/

My deepfake DALL-E 2 vacation photos passed the Turing Test - Matt Bell

• https://www.mattbell.us/my-fake-dall-e-2-vacation-photos-passed-the-turing-test/

Researchers devise iPhone malware that runs even when device is turned off - Dan Goodin

• https://arstechnica.com/information-technology/2022/05/researchers-devise-iphone-malware-that-runs-even-when-device-is-turned-off/

Certification Roadmap - Paul Jerimy

• https://pauljerimy.com/security-certification-roadmap/

DFIR Research & Writeups - @fancy_4n6

• http://fancy4n6.com