The evidence is iPhone 5s with iOS 9.1 and not jail breaked. I use UFED to do advanced logical extraction just now. All I know is that suspect did use Naver LINE a lot. Unfortunately I did not recover any deleted LINE chat messages after advanced log…

As we know that WeChat will wipe deleted chat messages. That's why forensic guys could  not dig out any deleted chat messages in EnMicroMsg.db. Is it possible to let those deleted chat messages show up again? For performance's sake, WeChat will creat…

Forensic is a strict science and we should let the evidence speak for itself. Several months ago I still could recovered Line deleted chat messages as below:…

Let me show you the WeChat version first. It is 6.3. What will happen to WeChat deleted chat messages? Take a look at "Blocks containing deleted data" and those deleted messages were wiped. What about WhatsApp? The version is 2.12.317. Fortunate…

Last month Candy was arrested on suspicion of having doing online porn webcam shows, but Candy refused to confess to her crime. The Police extracted data from her iPhone and found lots of chat messages in Skype’s database – main.db. Unfortunately the…

One of my friends asked me to do a favor for her. She said her friend deleted some important chat messages by “accident”, and her friend want to recover those deleted messages as soon as possible… I took a look at this android phone. My God, lots of…

A friend of mine she was frustarted in extracting WeChat chat messages from suspect's smartphone running Android 7.x. The situation is that no pattern lock/PIN/Password and USB debugging was enabled successfully. She tried every effort but in vain. N…

Line is one of the most popular messaging Apps, especially in Asia. On March 3 I downgraded the app LINE to an earlier version and extract the database successfully. Later this apk downgrade method feature became available in UFED as shown in UFED 5.…

A friend of mine asked me help him to examine his Android 5.0 smartphone. He did not say what's wrong with his phone, and he just wonder why his wife know everything he chat on the phone, and where he has been. I'd like to help him to figure out if a…

debug iapp through debug ip ftp debug iapp : to begin debugging of IAPP operations(in privileged EXEC mode) no debug iapp debug idmgr : to enable debugging for the identity manager (IDMGR)(in privileged EXEC mode) no debug idmgr debug of-mgr efp-ext…