In this episode, we’re going to discuss the digital intelligence implications of adding the iOS Screen and Android Digital Wellbeing apps to your digital investigations. We will explain what the apps are and how you can apply their data to your investigations.

As most of us know, our phones log everything we do. The logging of activities is also increasing in terms of depth and range of data available as mobile phone technologies advance. This is important news for examiners and investigators in the DFIR community because the data generated by these apps can often provide evidence of great value to solve cases faster.

For example, if you have an investigation where you need to prove a user’s device usage or lack thereof, these are apps you’ll want to be familiar with. Cellebrite Physical Analyzer parses this information for you, allowing examiners to dive into these databases a little bit deeper and gain valuable insight into a device’s user activities.

Typical insights could let you know:

  • If the screen was turned on or off
  • What app was in the foreground
  • When a user moved an app to the background

Both apps are designed for the user to be more aware of their device usage and exercise some control over it. For instance, if a user only wanted to be on their phone for five hours a day, they could manage that constraint. For any case that needs to prove if someone was on their phone at a particular time, this information would be very useful.

Register for the next iBeg to DFIR episode here.

Share this post