Lina Wilske, working as a student assistant in the research group Cybersecurity - Mobile & Wireless at the HPI, presented her research about “Unraveling Time: Understanding Time Formats in iOS Sysdiagnose for Security Forensics” at the Objective by the Sea conference in Hawaii, USA.
Lina:
“Imagine being able to trace a person’s journey and uncover hidden details about their activities through something as seemingly mundane as timestamps. iOS sysdiagnose logs, often overlooked, hold this potential. Each timestamp in these logs can tell a story, revealing patterns and movements that are crucial for forensic investigations. In this talk, we’ll delve into the timestamps used in sysdiagnose.
You’ll see real-world examples of how sysdiagnose’s timestamps could be used to detect travel durations and locations. These timestamps are more than just markers; they hold the potential to reveal your precise geographical location and travel history. By understanding these formats, security professionals can track changes in system time, identify suspicious activities.”
see the talk here
see the slides here