James McGee

Husband || Father || Digital Forensic Examiner || Cyber Crime Investigator || SQL Query Fanatic || Sometimes I make NFTs of my Dog

[James McGee @SQL_McGee]

🚀 HEART by Metadata Forensics, Version 2.2.0.0 is here!

PDF reporting just got better:
📄 Cover pages & page numbers
📑 Combine selections from multiple artifacts into a single PDF

Get it today at GitHub: https://t.co/QeuclBswlX

[James McGee @SQL_McGee]

The new ECG artifact goes beyond simply extracting data — ECG recordings are processed and visualized as waveforms, making them easier to review and analyze.

📈 More artifacts. More context. More insight.

Get it at GitHub: https://t.co/7K40MgpFQI

[James McGee @SQL_McGee]

🚀 HEART by Metadata Forensics, Version 2.1.0.2 is here!

We’re expanding Apple Health support with 4 new artifacts:

🆕 Medical ID Data
🧼 Handwashing
🪥 Toothbrushing
❤️ Electrocardiograms (ECG)

[James McGee @SQL_McGee]

HEART by Metadata Forensics, Version 2.1.0.0 is live! Our Apple Health Events & Activity Reporting Tools now has Date & Time Filtering, 7 new artifacts, Artifact Selection updates, and improved HTML Reporting.

Get it on GitHub: https://t.co/w4lEQvTQwh

[James McGee @SQL_McGee]

Free to download on GitHub: https://t.co/glUaLSu2LB

[James McGee @SQL_McGee]

🆕 Major Version Update: HEART by Metadata Forensics v 2.0! 🎉

✅ Artifact Selection
🕚 Timestamp Display

With Artifact Selection you can analyze a single artifact, a subset, or all artifacts. Display timestamps in UTC (default) or convert them to the device's local time.

[James McGee @SQL_McGee]

Free to download on GitHub: https://t.co/w4lEQvTQwh

[James McGee @SQL_McGee]

🚀 New Release: HEART by Metadata Forensics v1.4.2.0! 🚀

This release adds three new Apple Health application artifacts:

🥗 Nutrition
🔊 Environmental Sound - Detailed
🎧 Headphone Audio Levels - Detailed

[James McGee @SQL_McGee]

Previously, Environmental Sound and Headphone Audio Levels were typically aggregated into 30-minute intervals. The new artifacts provide much finer temporal resolution - parsing data at a granular level and isolated dB spikes down to individual one-second intervals in some cases.

[James McGee @SQL_McGee]

Free to download on GitHub: https://t.co/w4lEQvTQwh

[James McGee @SQL_McGee]

🚀 New Release: HEART by Metadata Forensics v1.4.1.0! 🚀

This release adds six new Apple Health application artifacts:

📋 Health Details
❤️ Cardio Recovery
💓 Heart Rate Variability
🧘 Mindful Minutes 
🌤️ State of Mind
🌬️ Breathing Disturbances

[James McGee @SQL_McGee]

Check out our newest article, Empirical Assessment of Apple Health Activity Data: Accuracy, Granularity, and Database Artifacts! Looking deeper into the cache_encryptedC.db and iOS 26 changes. 
Article: https://t.co/mft1R1Oy5f
Support updated to HEART: https://t.co/QeuclBswlX

[James McGee @SQL_McGee]

KMLer turns CSV and XLSX files into KML files while adding the investigative context examiners and analysts need. 🕵️ Horizontal accuracy visualized, extended data, processing report, and more!
Read more here: https://t.co/QGGj6SLtBQ 
Get it here: https://t.co/jnRkWey523

[James McGee @SQL_McGee]

Get it here: https://t.co/w4lEQvTQwh

[James McGee @SQL_McGee]

🚀 New Release: HEART by Metadata Forensics Version 1.3! 🚀
We’ve added Local Device Time conversions! Because most Apple Health and Fitness application artifacts are linked to the device recorded the event, the associated time zone is preserved as well. Conversions by activity!

[James McGee @SQL_McGee]

Join the free Summit (Feb 23–26) for great DFIR insights:
https://t.co/MYkkTkcRXD
Check further work on our blog:
https://t.co/PO5o43YQPh
And try HEART by Metadata Forensics (Health Events and Reporting Tool—37+ artifacts):
https://t.co/0IbCymzank

[James McGee @SQL_McGee]

Couldn't start the week better—huge thanks to @cScottVance for the shout-out in his 'Harping on health data' session at #MVS2026 Magnet Virtual Summit!
Grateful my Apple Health forensics work was mentioned alongside his Mobile Unpacked series.

[James McGee @SQL_McGee]

Ever wondered what secrets are in your Apple Contacts? 📱 iQueryContacts 🕵️ is our new advanced SQL query work for the AddressBook.sqlitedb. All the classic data plus some new info including the Chinese lunar birthday! Find out more at https://t.co/fpDSRtfF8u

[James McGee @SQL_McGee]

🧩 RowIDetective 🕵️‍♂️ formerly detailed Lagging for the Win: Querying for Negative Evidence in the sms.db. Now detecting missing messages at the end of Apple sms.db. Because every gap tells a story.
🔗 https://t.co/cStB0T9myA