Alex

Music, Fuzz Pedals, Digital Forensics, Cat Pictures, guitarist in @LongFallBoots

[Alex @kviddy]

@AlexisBrignoni Hurts even more if you were the one that wrote it in the first place.

[Alex @kviddy]

@sccs1300 @AlexisBrignoni @Cellebrite I haven't played with it, but this project looks like it's worth checking out: https://t.co/WLeb4CzcHH

[Alex @kviddy]

And ALEAPP has basic universal parsing for all FCM artefacts plus specialised parsers for some apps we found useful in casework at @CCLForensics previously. AND we can add more! If you find interesting apps using FCM which need further processing let us know!

[Alex @kviddy]

@AlexisBrignoni 👀

[Alex @kviddy]

@AlexisBrignoni Normalize or perish.

[Alex @kviddy]

@lesaleemc @BBC6Music @divinecomedyhq And any of the songs it mentions.

[Alex @kviddy]

@kidviddy Rocking up and popping up on O'Malley. Strap in lads.

[Alex @kviddy]

@scenic_teapot @BassPlayerWeb It comes with a mini mallet.

[Alex @kviddy]

@kidviddy Yeah but you get a tick? Don't you want a tick?

[Alex @kviddy]

@willmaddoxbanjo @ABGuitartech This one was dyed and then oiled. I used tru-oil which is itself tinted so it does darken the finish but it gives a really lovely finish that enhances the look of the wood nicely in my opinion. I've used tung oil on a yellow guitar before and that worked fine too.

[Alex @kviddy]

We've also added new support for File System API, Platform Notifications, Downloads from shared_proto_db and (partial support for) SNSS session files.

[Alex @kviddy]

We've just posted a bunch of new stuff to our (increasingly badly named) repo, giving programmatic access to a bunch more data stores in Chrome/Chromium/Electron plus some new utilities. Highlights in the thread...

#dfir #digitalforensics

https://t.co/Rr6ACuCjiw

[Alex @kviddy]

ccl_chrome_audit is a research tool which audits multiple data stores based on a regex fragment for the hostname. It's designed to accelerate research into Web apps by quickly showing you what is stored and where - this has been especially useful in some recent work...

[Alex @kviddy]

@johnson0844 Disclaimer: I made this tool and the company I work for sells it, but genuinely, the one tool I never close is RabbitHole. That's probably because it was built (and continues to be built) to address the challenges I encounter day to day

https://t.co/xkaKSqf07I

[Josh Hickman @josh_hickman1]

#DFIR Android 13 is keeping track of when apps are launched and from where in the database “SimpleStorage” found in USERDATA/data/com.google.android.as/databases/. The table storing the info is “EchoAppLaunchMetrcisEvents” /1

[Josh Hickman @josh_hickman1]

#DFIR https://t.co/DmV0n18FxZ

[Alex @kviddy]

I'll be going through this library and adding type hints everywhere. If you're not familiar with them and you're writing python, I highly recommend that you read up on them and use them - they make detecting and debugging a whole class of logic errors a lot easier.

[Alex @kviddy]

#dfir python folk - if you use my Chromium indexeddb library, I've just issued a critical patch fixing a bug that can lead to missing records. This will only affect you if you're using the indexeddb library itself, the other stuff is unaffected.

https://t.co/Rr6ACuCR84

[Alex @kviddy]

What could I have done to help spot it: type hinting the return type of the function would have immediately revealed the cause in my IDE. I write Python pretty much like a typed language these days, and while I had argument type hinting, I didn't have it for returns here.