🆕 #Android Samsung #Knox (Secure Folder) history log artifact in #ALEAPP.
🪵 SQLite database contains a log of items requested be moved in or out of the secure folder in Samsung Android devices.
👏 Thanks to HSI Digital Forensics Examiner Geovanny Perez for the discovery of this artifact.

#DFIR

#ALEAPP update, new parsers for DuckDuckGo🦆:

🔖Bookmarks
⭐Favorite Sites
🌐Web Browser History
📑Open Tabs
📌Updates to Tab Thumbnails

Big thanks to Damien Attoe for the contributions! #DFIR

Download 🔗: github.com/abrignoni/AL...

#ALEAPP got a new release (v3.3.0) a few days ago, check it out. More stuff on the way! #DFIR github.com/abrignoni/AL...

New Bluesky parsers in #ALEAPP for Android #MobileForensics.
💬 Messages
📃 Feed posts
👥 Actors
🔎 Searches
📄 Posts
🔗 Get ALEAPP here: https://buff.ly/3Px6B1L

#DigitalForensics #DFIR

#ALEAPP v3.2.5 out now! #DFIR github.com/abrignoni/AL...

New #Bluesky #Android parser in #ALEAPP preview.

💬 Parses messages, actors, feed, and follows.
⏰ Hope to be done with most before Thursday's Digital Forensics Now Podcast stream (@dfnpodcast.bsky.social)

#DigitalForensics #MobileForensics #DFIR #WillDemoLiveOnStream

Android 15 now has a "Private Space." What to learn about it? @charpy4n6.bsky.social and me will be discussing it this Thursday on the Digital Forensics Now Podcast at 6 PM EST.

Current tools are missing a lot of data from these Private Spaces. Notice how #ALEAPP parses it out.

#MobileForensics

Parsers need to be built baby.
#iLEAPP #ALEAPP

i hadn't dug into android internals in many years, even longer for iOS

had never used autopsy before, or had the opportunity to use #ALEAPP or #iLEAPP, or several of the other tools included

so thank you, #DFIR community, for being so awesome