DoubleBlak

@Kristenvanw @em64000 A podcaster (I don’t recall who as I didn’t speak to him) reached out to Cellebrite PR who spoke to me. As a result I reached out to MSP an found they had already contacted support, as had Mr Green. So yes. Pretty much all of the above.

@em64000 If the answer to E is yes, I’d like to know which one @BlakDouble

Mr. Whiffen, maybe I’m just getting mixed up in the wall files and the pepperoni pizzas…Can you clarify how you were brought into this case? Was it: (A) Richard Greene (B) The Mass State Police (C) The NCDAO (D) Cellebrite Public Relations (E) A true crime podcaster (F) All of the above (since that’s what you’re on record stating)

📣 Tomorrow Night! | Tune in LIVE for the 2024 #SANSDMA Ceremony as we highlight and celebrate our nominees tomorrow, Sunday, December 15 at 7:30 p.m. EST. This is going to be a special night! 🗓️ Mark your calendar and choose your channel of choice, and select "Attend/Notify Me" on the landing page to be notified as the event date approaches. Watch live on: 🔘 YouTube: sansurl.com/sans-dma-youtu… 🔘 LinkedIn: sansurl.com/sans-dma-linke… 🔘 Facebook: sansurl.com/sans-dma-faceb… #cybersecurity #InfoSec

This was unexpected, but no less an amazing honor! If you could spare a moment, voting is open until 4th October and I would truly appreciate your vote. I love this community and being part of it. Good luck to all the finalists! You can vote here: survey.sans.org/jfe/form/SV_e3…

An interesting occurrence where knowledgeC is sync'ing data from other devices... #DFIR doubleblak.com/syncpeer

🚨 I BEG TO DFIR 🚨 Understanding SQL Databases - cellebrite.com/en/i-beg-to-df… Join @BlakDouble @HeatherMahalik @4n6s_mc and I when we dive deep into SQL on @Cellebrite IBTD webinar

@HeatherMahalik @OngDevLab They do look quite tasty though…

@OngDevLab @BlakDouble HAHAHA

Guess what I did tonight- I BLOGGED and not for work!!! Thanks @BlakDouble and @bizzybarney for the sanity checks. #DFIR smarterforensics.com/2024/08/ios-17…

@Scott_Kjr Oh jeez. We have 35c/95f here and that’s enough for me to tap out. 🥵

It’s a dry heat.

@KevinPagano3 I thought I should add some clarity.. the original post was a bit wordy. 😂

.@BlakDouble back at it with explaining Browser State doubleblak.com/blogPost.php?k…

thebinaryhick.blog/2024/06/28/the… #DFIR

That’s supposed to say “Protobuf Original Byte View” 🤦‍♂️

Available at doubleblak.com/app.php?id=Mus…

Second update in as many weeks - but this is a fairly big one. Facelift UI / Tabbed interface / Working, Synchronized Search / Protobug Origina Byte View / ABX Support :) #dfir

@thelazza Good call! Try again 😃

@BlakDouble It seems your previous RSS feed is broken (the ending was changed from .xml to .php). Have you considered adding a 301 redirect? Otherwise users risk to not notice the issue and miss some posts. Thank you. 😃

Latest Article regarding Mapssync; how to determine visited locations and a deeper dive into WAL recovery. #DFIR doubleblak.com/mapssync

Closing Cases: The Crucial Role of Full File Systems in Law Enforcement Investigations @HeatherMahalik @Cellebrite forensicmag.com/3425-Featured-… via @Forensic®

BrowserState has come up a few times recently and certainly deserves an explanation. But what else could “last_visited_time” mean? doubleblak.com/browserstate

@PaulScurvy Didn’t even have time to tweet it myself 😂

Do you know what your timestamp means. Last_visited may not truly last visited. doubleblak.com/browserstate @BlakDouble #DFIR

@nyy4n6 PDU is easy compared to this! 😂 My son came home with something similar the other day, takes forever to show working since you need to draw all the boxes!!!