Chuyển đến nội dung chính

Bài đăng

Hiển thị các bài đăng có nhãn dump

Update2 - HERREVAD Databases Geo Location Artefacts

This second update concerns HERREVAD Databases Geo Location Artefacts referred to by me in my previous posts: Update - HERREVAD Databases Geo Location Artefacts (2018) http://trewmte.blogspot.com/2018/07/update-herrevad-databases-geo-location.html and HERREVAD Databases Geo Location Artefacts (2017) http://trewmte.blogspot.com/2017/02/herrevad-databases-geo-location.html Due to lack of

Update - HERREVAD Databases Geo Location Artefacts

Back in February 2017 I wrote an article relevant to "HERREVAD Databases Geo Location Artefacts" (http://trewmte.blogspot.com/2017/02/herrevad-databases-geo-location.html) and I regularly conduct searches for any useful updates or supporting information that maybe of use. ----- I see SANS DFIR in May 2018 published "Advanced Smartphone Forensics Poster - SANS Forensics" a poster to identify "

HERREVAD Databases Geo Location Artefacts

From a recent discussion regarding HERREVAD Databases it has emerged that they are in fact undocumented Android features for google mobile services (GMS). Any extracted and harvested data from these databases is on the basis "as is" recovered. Oxygen Forensic Detective 911 WiFiHistory.png presents a helpful and useful example of recovered data from HERREVAD: Image courtesy of http://