Collecting Message App Data

Collecting data from messaging apps can be difficult, but specialized applications exist to create snapshots of text messaging services which will index the text of the messages and allow it to be searched. Mobile electronic discovery leader, Cellebrite, offers Chat Capture, a tool that is part of its Responder software. It can be set to collect images and text of messages from a designated time range.

The tool supports WhatsApp and Signal. Keep in mind that if an encrypted messaging app stores messages locally, it may be possible to collect the data.

Win 10 Can't Find an iPhone

If you plug your laptop into a PC running Windows 10, and it charges, but Windows doesn't find the phone - in iTunes or Device Manager, turn off the mobile hotspot on the iPhone. This seems to prevent Win 10 from finding the mobile device. This evening, Win 10 instantly found my iPhone right after I shut down the mobile hotspot.

Clearing iPhone RAM

You can easily clear the RAM on an iPhone by following these steps:

1. Go to Settings . . . Accessibility . . . Touch, and select the option for AssistiveTouch.

2. Then go to Settings . . . General . . . Shut Down

3. Rather than swiping 'slide to power off', press the white AssistiveTouch button, and then hold the home button for five seconds.

4. The RAM on the phone should be cleared. This will enable the phone to function faster.

Keep in mind that RAM is volatile or temporary memory. Clearing the RAM may erase some app data, as well as passwords and encryption keys. Volatile user data on an iPhone is encrypted, and cannot be easily acquired by a forensic process.

Non-volatile memory (emails, contacts, text messages and other system files) is retained even after RAM is cleared. Non-volatile memory is also called NAND flash.