What is the KnowledgeC database? The KnowledgeC.db file contains a record of different processes that operate on an Apple device including application usage. Safari Internet history can also be recovered from the database. The KnowledgeC.db file can be extracted from an Apple device using certain forensic software and can allow for an assessment of when […]

What Are Jumplist Entries? The Jump List function was first introduced within the Microsoft Windows 7 operating system and enables the user to view a list of the files most recently opened within each application pinned to the taskbar. The user can view the Jump List entries for a particular application by right clicking on […]

Why Would I want to Write Protect USB Devices? A private computer that is shared by others or a company computer can contain personal, confidential or commercially sensitive information. Such information can easily be copied from the computer if the user connects a USB data stick or hard drive to it. To prevent this, a […]

The cases that we are involved often include the examination of mobile phones that have been factory reset before they were seized or handed over for review and the device may contain no or limited user data. Rather than stopping the examination as soon as it becomes apparent that the phone was reset and contains […]

We have recently encountered issues and concerns as to whether the disclosure of data is possible under GDPR, notably from the CPS. As part of an investigation of the evidence, it is often necessary for a copy of the data extracted from a device by Police to be disclosed. This data required is normally from […]