Josh Hickman (@thebinaryhick.blog) Bsky

Old Dog, New Tricks – Lost Apples 2.0 If you are not familiar with Lost Apples, please read the original post before proceeding. There have been some interesting cases in the news lately that have caused me to give some thought about devices being in proximity to each other, and how to prove that proximity, especially when those who are intent on doing harm are going dark prior to doing their bad deeds…

#DFIR

3 weeks ago 0 0 0 0

Endtroducing…Lost Apples I promise I'm OK 🙂 Earlier this year I wrote a post about Observations.db, which is a component of Apple's FindMy functionality. It was the second part of a post I had written in 2024 about rogue Bluetooth trackers and FindMy compatible devices on iOS devices. In short, FindMy data can offer examiners additional sources of location information along with information about other Apple devices that may be on a given account.

#DFIR

4 months ago 0 1 0 0

👀 👀 👀

5 months ago 1 0 0 0

Further Observations – More on iOS Search Party iOS is observing. And judging. Note: This article assumes you have read a previous article about AirTags, found here, as it references items associated with iOS searchpartyd with little to no explanation. It is highly recommend you read the previous article before proceeding. Over the past several months I have been exploring iOS’s Search Party. It is that thing…

#DFIR

7 months ago 2 3 0 0

(Not) Strange Bedfellows – Samsung’s Rubin & Digital Wellbeing Or not. Another summer has flown by. Vacations, court (yes!), classes (also, yes!), and of course the conference circuit were (and still are) all in full effect this year. Things are winding down a little and I finally have a chance to put fingers to keyboard and write about some things I have had in the works. It is getting increasingly difficult these days to find time to sit and write.

(Not) Strange Bedfellows – Samsung’s Rubin & Digital Wellbeing

Or not. Another summer has flown by. Vacations, court (yes!), classes (also, yes!), and of course the conference circuit were (and still are) all in full effect this year. Things are winding down a little and I finally have a chance to…

8 months ago 1 1 0 0

Week 14 – 2025 Use the discount code thisweekin4n6 for 15% off any class at Cyber5w.Use the code PM15 or click this link for 15% your next Hexordia classTakes a class with me! Akash Patel Understanding Partitioni…

Week 14 - 2025 #DFIR
thisweekin4n6.com/2025/04/06/w...

1 year ago 4 5 0 0

Finding Phones With Google Maps Part 1 (Android) Lost. But not. Note: there is an important update to this article. Please see the appended portion. I am a firm believer that digital forensic artifact discovery is, at times, equal parts persisten…

It’s not often that I get to revisit old research, but this has happened twice now in the past couple of months. There’s an update to my Google Maps on Android article.

"We practitioners are in a constant state of learning; our discipline requires it.”

#DFIR

thebinaryhick.blog/2023/10/17/f...