BLOG
Digital Forensic Analysis, eDiscovery, Consulting
DIGITAL FORENSICS
Collecting iPhone Unified Logs via MacOS
iOS is always “doing things,” both because of and regardless of user activity. Most of what happens on a device is logged somewhere in the background. Some of this activity is captured in files and databases that are preserved in a forensic extraction. But a lot of...
A Practical Path to Mobile Device Discovery for Private Investigators—Using Free Tools and Smart Workflows
As a licensed Private Investigator (PI), it’s frustrating when I’m asked by other PIs how they can preserve visible data from a client’s iPhone. For example, "one of my clients exchanged messages with a contractor who accepted payment and then failed to deliver...
Case Study: Establishing Recklessness Through Digital Forensics in a Florida Vehicular Homicide Case
Case Timeline September 15, 2016 – Crash occurs on I-75 in Hernando County, Florida. February 27, 2018 – Gregory Andriotis arrested in Volusia County on a Hernando County warrant, charged with one count of vehicular homicide and three counts of reckless driving...
Preserve! Preserve! Preserve!
The Perils of Delayed Mobile Device Preservation At SJDC, we consistently emphasize the importance of prompt preservation of mobile device data for litigation. While some matters may not demand immediate action, others—such as significant event investigations (e.g.,...
Phone Hacking and Spyware: Warning Signs & What to Do Next
Disclaimer This guide is not legal advice. While some steps suggested below are best practices for investigative and forensic purposes, they do not replace diligent measures to protect your safety or personal information. The order of these steps requires careful...
Capturing Android Dumpsys/Logcat Logs
I started this blog a while ago, but was pushed over the finish line after watching a great webinar yesterday by Chris Vance at Magnet Forensics: ADB – It’s Easy as ABC: Understanding the Power of ADB Commands. If you're doing Android forensics, it’s worth a...
Mobile Device Pattern-of-Life Data and Privacy in Significant Event Investigations
Understanding Pattern-of-Life Data in Mobile Device Forensics In mobile device forensics, "pattern-of-life" data refers to the behaviors and activities of individuals as inferred from their mobile device usage. By analyzing this data, investigators can gain valuable...
Protected: Mobile Device Forensic Collection/Extraction Protocol
Password Protected
To view this protected post, enter the password below:
Capturing iOS Crash logs for Forensic Analysis
The purpose of this post is to provide instructions for the capture of iOS crash logs, including sysdiagnose logs, after they've been created. These logs can also be highly relevant to a digital forensic analysis and thus it is important to create and capture these...
Instructions for Triggering iOS SysDiagnose Log Capture
The purpose of this post is to provide digital forensic examiners a user-friendly guide (available publicly here) for forensic analysts to trigger (capture on a iPhone/iPad) a "sysdiagnose" log of events. Capturing Android crash logs is covered in a separate post....
Digital Evidence Forensic Preservation Language
Updated 3/6/25 Below is suggested language to include for the preservation of electronic devices in various cases. Please keep in mind that preservation does not mean that the data will be used in litigation. However, since we won't know which devices are/not relevant...
Digital Forensic, eDiscovery and General Technology Analogies for the Courtroom
The purpose of this page is to generate and maintain a resource for digital forensic and eDiscovery practitioners, lawyers and legal professionals, and anyone generally looking to understand and/or explain (by way of analogy) some of the technology concepts that may...
Supreme Court Agrees to Hear Cellphone Tracking Case
Very interesting caselaw in the works. Looking forward to seeing the outcome. https://nyti.ms/2sJ1T6S
Accident cases involving the presence of a cell phone or other mobile device.
SJDC is often hired to perform digital forensic analyses of cell phones or other types of mobile devices that were present during traffic accidents. The goal of these exams is almost always to determine the possibility of distracted driving and mobile devices have...
Riley v. California three months later
Three months after the Supreme Court's Riley v. California decision mandating police to secure a search warrant prior to searching an arrestee's cell phone, and the world is apparently still turning. Many, present company included, believed this decision would...
Welcome
Located in Jacksonville, Florida, St. Johns Data Consulting, LLC (SJDC) provides digital forensic analysis, consulting, training, and expert testimony in support of litigation. We strive to bring our clients the most secure, professional, confidential, and competent...