Clik here to view.
Hidden digital evidence part 4
Welcome to the final instalment of our short blog series on places you may not have thought to look for digital evidence. Biometric data The use of fingerprints, retinal scans and facial recognition is...
View ArticleClik here to view.
Double accreditation is a forensic first
We’re absolutely delighted to announce something of a ‘forensic first’. CCL-Forensics has become the first UK digital forensic lab to be accredited to ISO17025 – not just for one part of the business –...
View ArticleClik here to view.
CCL-Forensics at Criminal Law Conference
CCL-Forensics is pleased to be involved in the annual Law Society Criminal Law Conference this week. Our Forensics Manager, Mark Larson, will take to the stage to discuss how digital evidence can prove...
View ArticleClik here to view.
New version of PIP (XML and plist parser) coming soon
Our ever-popular XML and plist parsing tool, PIP, is coming of age with a new, improved version. Currently in beta-test, and with the updated version available free to current PIP users (following its...
View ArticleClik here to view.
The Forensic Implications of SQLite’s Write Ahead Log
By Alex Caithness, CCL-Forensics SQLite is a popular free file-based database format which is used extensively both on desktop and mobile operating systems (it is one of the standard storage formats...
View ArticleClik here to view.
Parsing Apple System Log (ASL) files on iOS and OSX for Fun and Evidence (and...
(If you’re dying to get stuck in and are only after the links to the Python scripts, they can be found at the bottom of the post!) After every update to iOS I like to take a file system dump of one of...
View ArticleClik here to view.
Cell site blog – Never mind the quality, feel the width
Thoughts and observations on how ‘more’ could mean ‘less’ in the presentation of cell site analysis. By Matthew Tart, Cell Site Analyst This month – we look at quality over quantity in cell site...
View ArticleClik here to view.
Chrome Session and Tabs Files (and the puzzle of the pickle)
In this blog post Alex Caithness investigates the file format and contents of Chrome’s “Current Tabs”, “Current Session”, “Last Tabs” and “Last Session” files and discovers that, even with the original...
View ArticleClik here to view.
New Epilog Signature files released
Epilog Signature files allow users to add specific support for new databases they encounter and although they are designed so that Epilog’s users can create their own signatures when the need arises,...
View ArticleClik here to view.
Reverse Engineering Evernote Penultimate (or: When is a picture not a picture?)
In this post Alex Caithness takes a look at “Penultimate” on the iPad and discovers that a picture paints a thousand words… but only once you work out how that picture is stored. Recently we came up...
View Article
