Decode. Analyze. Understand.
Decode. Analyze. Understand.
In the realm of iOS forensics, certain codenames carry more weight than others. “Stark” is one of them. While the user interface proudly displays “CarPlay,” the underlying artifacts in the Unified Log remain loyal to their internal heritage. Today, we…
Following my previous research into physical button haptics, I’ve shifted focus to a more critical system state: the Emergency SOS sequence. While a standard button press navigates the UI, a sustained hold on the Apple Watch (watchOS 26.2) triggers a…
This week, I shifted my focus to the most common companion of the iPhone: the Apple Watch. While touch events on iOS are well-documented, physical button interactions on the Watch, specifically the Digital Crown and the Side Button, provide a…
This week a colleague shared some interesting artefacts related to the on-screen keyboard in iOS and asked me to validate them and provide forensic interpretation. The result: a consistent sequence of artefacts in the Apple Unified Log (AUL) that reveal…