S4:E3 // Deducing the duplications: Understanding duplicated data in file systems - Magnet Forensics Both iOS and Android are known to keep multiple copies of certain data, but the reason why isn't always the same. Not all copies are created equal! In this episode of Mobile Unpacked, we will explore why data gets duplicated across both iOS and Android and how those duplicates can be ignored or crucial to your investigation.

Both iOS and Android are known to keep multiple copies of certain data, but the reason why isn’t always the same. Not all copies are created equal! On March 25, join us for our next #MobileUnpacked, where Christopher Vance will explore the duplication of data: https://ow.ly/QMH950YxEBP

Starting at 1:00 PM ET!

Don’t miss @cscottvance.blsky.app present the latest #MobileUnpacked at #MVS2026. He’ll be “Harping on health data” and diving into how health data is protected on iOS and Android—and how it can be accessed during investigations.

Watch live: ow.ly/a3Fp50Yj8nU #DFIR

S4:E1 // Breaking down the browsers - Magnet Forensics Over 60% of online traffic flows through mobile browsers—making them a critical source of evidence for forensic examiners.

On Jan 28, join @cscottvance.bsky.social for the latest episode of #MobileUnpacked as he breaks down the most common browsers for iOS and Android, uncovers hidden browsers, and reveals the key artifacts and settings every examiner must master: ow.ly/lnFQ50Y3YfK #DFIR

S3:E11 // Analyzing an app's lifecycle - Magnet Forensics Mobile apps are central to how users interact with their devices—and they leave behind a rich trail of forensic evidence. In this episode of Mobile Unpacked, we’ll explore the full lifecycle of an app...

Join us for our next episode of #MobileUnpacked on Nov 26, where @cscottvance.bsky.social will explore the full lifecycle of an app: how it gets installed, how to trace its origin, monitor its usage, and uncover what remains even after it’s been deleted: ow.ly/ZQKz50Xx1he #DFIR

S3:E10 // Picking apart the passcodes: Determining the method of unlock on devices - Magnet Forensics A common theme in digital forensics is putting the target behind the keyboard. One way to help this is around the use of passcodes and especially the use of biometrics. How can we determine though wha...

Be sure to join us for tomorrow's (Oct 29) #MobileUnpacked webinar where @cscottvance.bsky.social will talk about passcodes and biometrics and how they can help put the target behind the keyboard: ow.ly/RbCi50Xj3uw #DFIR

S3:E10 // Picking apart the passcodes: Determining the method of unlock on devices - Magnet Forensics A common theme in digital forensics is putting the target behind the keyboard. One way to help this is around the use of passcodes and especially the use of biometrics. How can we determine though wha...

A common theme in #DFIR is putting the target behind the keyboard. One way to help is around the use of passcodes and especially the use of biometrics. On Oct 29, join us for our next #MobileUnpacked where @cscottvance.bsky.social will dive deeper into these topics: ow.ly/p1r550XgvXb

Magnet Forensics support for iOS 26 - Magnet Forensics To ensure you continue to get the critical mobile insights needed for your investigations, Magnet Forensics is proud to announce Magnet Graykey and Verakey support for Apple iOS 26!

ICYMI: We announced Magnet #Graykey and #Verakey support for Apple iOS 26! Learn more about the updates and check out a recently recorded #MobileUnpacked where @cscottvance.bsky.social explores them in more depth: ow.ly/HvA050XbSsS #DFIR

S3:E9 // NOW That’s what I call iOS: 26 - Magnet Forensics Apple has hit the jump to light speed and jumped from iOS 18 to iOS 26! In this episode of Mobile Unpacked we’ll explore the new changes and challenges Apple’s yearly upgrade cycle is bringing to the…

Be sure not to miss today's exploration of #iOS26 in our latest #MobileUnpacked! @cscottvance.bsky.social will talk about some of forensic implications around the changes in the newest Apple OS, including the Phone & Messages apps and more. Register here: ow.ly/XK3r50X1blX #DFIR

S3:E9 // NOW That’s what I call iOS: 26 - Magnet Forensics Apple has hit the jump to light speed and jumped from iOS 18 to iOS 26! In this episode of Mobile Unpacked we’ll explore the new changes and challenges Apple’s yearly upgrade cycle is bringing to the ...

This week's #MobileUnpacked is going to be a big one! Join us as @cscottvance.bsky.social explores the brand-new #iOS26, including UX changes of #LiquidGlass, and updates to the Phone & Messages app that could have serious impacts. Save your spot now: ow.ly/zr8150X0bp7

Our next episode of #MobileUnpacked, coming Aug 27, will see @cscottvance.bsky.social joined by Jeff Rutherford for a deep dive into location data on #iOS and #Android. Plus, you'll get clues and hear more about our exciting new #ArtifactHunt! Save your spot now: ow.ly/ksZJ50WLw0c #DFIR

S3:E7 // Analyzing Android 16 - Baking up Baklava - Magnet Forensics With Android 16 now released to the Google Pixel device family, it's time to take a look at another sweet treat codenamed version of Android. This version is less about artifacts and more about…

With Android 16 now released to the Google Pixel device family, it’s time to take a look at another sweet treat codenamed version of Android. On July 30, take a bite out of Android’s “Baklava” build with @cscottvance.bsky.social in the next #MobileUnpacked: ow.ly/nRGu50WuNJO #DFIR

S3:E6 // Aligning on Android acquisitions - Magnet Forensics How many different ways are there to get Android data? What’s the difference between agent-based extractions and ADB acquisitions?

Our next episode of #MobileUnpacked is coming up on June 25 and @cscottvance.bsky.social will explore the HOW and WHY behind different Android acquisition methods, including what you need to get and what you want most from Android targets. Register here: ow.ly/IS2S50WeRFI

S3:E4 // Discussing the Data Drop-Off - Magnet Forensics iOS has long been known for only storing certain records for a fixed period of time. In some cases, artifacts may only be stored on device for a few days, and in others, never deleted without the user...

On April 23, join us for a new episode of #MobileUnpacked where @cscottvance.bsky.social will break down the “best before” dates of our favorite artifacts and deeper explore how to maximize the amount of data retained and extracted: ow.ly/ro5N50VCtxC #DFIR #MobileForensics

S3:E3 // The AI we carry - Magnet Forensics With major mobile operating systems incorporating artificial intelligence into base functions and third-party applications, it’s time to explore what artifacts are available. In this episode of Mobile...

Our next episode of #MobileUnpacked is coming up on March 26! In this episode, @cscottvance.bsky.social will cover built-in #AI from iOS, Android, and even third-party applications and explore what artifacts are available: ow.ly/WRFx50Vno9j #DFIR #MobileForensics #DFIRAI

S3:E2 // apples, onions, and ogres: dealing with layered iOS data structures - Magnet Forensics In the Dreamworks film Shrek, the titular character said that 'Ogres are like onions. They have layers.' Well, Apple isn't so different from the green hero in that their lovable monster, iOS also feat...

Did you miss our special #MVS2025 edition of #MobileUnpacked? A recording is now available on demand, so this is your chance to catch up on @cscottvance.bsky.social's overview of data structures in iOS: ow.ly/BvXG50V4fKY #DFIR #MobileForensics #iOSInvestigations #MagnetVirtualSummit

#MVS2025 kicks off Monday! Be sure to save your spot for our keynote presentations, starting at 9:30AM ET with Magnet leadership and then we'll have Kevin Mulcahy up at 9:30AM ET. Then join us for our #CTF workshop and a new #MobileUnpacked: ow.ly/pM2n50UVLME #DFIR

We're excited to unveil the next episode of #MobileUnpacked at #MagnetVirtualSummit 2025! Join us at #MVS2025 to hear
@cscottvance.bsky.social cover how to identify data structures and how to find the key artifact data hidden across different file types: ow.ly/3eaa50UTmaQ #DFIR

S3:E1 // ADB: It's easy as ABC - Understanding the power of ADB commands - Magnet Forensics The power of the ADB command protocol is instrumental in the forensic analysis of Android devices. In this episode of Mobile Unpacked we'll focus on learning the basics up to some advanced ADB command...

Join us for the next episode of #MobileUnpacked on Jan 29 where @cscottvance.bsky.social will focus on learning the basics up to some advanced ADB commands that can be used to acquire key information and files from Android devices: ow.ly/bNbx50UNV66 #DFIR #MobileForensics

Ep. 24 // Split Personalities - understanding multiple user account purposes in Android - Magnet Forensics While multiple user-accounts are not a new thing with Android, they are gaining momentum in how much they are used. In addition to just secondary profiles and guest accounts, more and more services li...

While multiple user-accounts are not a new thing with #Android, they are gaining momentum in how much they are used. In our next #MobileUnpacked episode on Dec 18, @cscottvance.bsky.social will highlight what your #DFIR tools may not be targeting: ow.ly/iELK50UrUgA #MobileForensics

Ep. 24 // Split Personalities - understanding multiple user account purposes in Android - Magnet Forensics While multiple user-accounts are not a new thing with Android, they are gaining momentum in how much they are used. In addition to just secondary profiles and guest accounts, more and more services li...

Our final #MobileUnpacked for 2024 is coming up on Wed, Dec 18! Join @cscottvance.bsky.social as he talks about multiple user-accounts, including detecting them, figuring out what service they may be tied to, and maximizing the data you’re able to extract: ow.ly/cwIU50UqfQV #DFIR

Ep. 23 // Following the Money | Tracking Mobile Payment Artifacts - Magnet Forensics With iOS and Android both having tap-to-pay payment functionality built in, it’s opened up a great opportunity for tracking where and how they’re using this feature.

There's still time to register for our next #MobileUnpacked! On Nov 27, join @cscottvance.bsky.social as he talks about payment artifacts, including where they're stored and how they can be recovered for Apple Pay (and Apple Cash), Google Pay, & Samsung Pay: ow.ly/uRv250Uf0Eo #DFIR