Your tools don't testify. You do.
Validated4n6 helps examiners move beyond push-button forensics: validate the process, verify the result, and walk into court knowing exactly what the data shows.
From the blog
Making the Case: How to Win Command Staff Support for Digital Forensics
A practitioner's framework for showing decision makers the risk of under-investing in digital forensics, and the return on investing in people, training, and tools.
Read article → SQLiteDeleted, But Not in the WAL: How SQLite Handles a Deleted Message
Why a forensic tool can show a text message as deleted when it isn't in the WAL file, and how to prove what happened using the shm file and SQLite's own specification.
Read article → iOS ArtifactsPhotos.sqlite: How to Detect an Adjusted Photo Date or Location on iOS
A user can change a photo's date and location in the iOS Photos app. We tested Photos.sqlite and EXIF on iOS 18.3 to see what changes, what survives and how to spot the edit.
Read article →
Ricky Johnson
Major, Criminal Investigations Division, Richland County Sheriff's Department. FBI National Academy Session 295 graduate.
With the Richland County Sheriff's Department since 2007, and dedicated to the forensic acquisition and analysis of mobile devices since 2014. He has testified as an expert witness in mobile and digital forensic analysis in more than 10 South Carolina trials, nearly all homicides or other major crimes. Validated4n6 is where that experience gets shared.
“Criminals will lie. The data does not.” Featured in Who's On The Move ↗
Have a question or a tool to suggest?
Consulting, training, and speaking inquiries are welcome.