Session Type
Lecture
Name
Utilizing Timeline Analysis to Investigate the Lifespan of an iOS Voice Memo
Speakers
Luis Martinez | Westchester County District Attorney’s Office, NY
Description

The Voice Memo app on iOS can be used to capture important information. Device and cloud storage make long term preservation, and future access, a trivial task. With ease, one can access the minutes of a business meeting, a portion of a class lecture, or conversation between friends. With the same ease, though, a recording can be modified. The recording takes on a new form, and new meaning - depending on the modification. Using both artifact and timeline views within Magnet AXIOM, an investigator can analyze the twists and turns a voice memo file has taken. Add in a small amount of hex-view analysis, and the tale of a voice memo file starts to take shape. This presentation is based on test data that can be applied to real-world scenarios. Attendees will follow the path of a voice memo file from original creation, through modification, and rebranding. The fragments of information left behind will be highlighted through timeline analysis.