Tips & Tricks // Knowledge(C) is Power – Analyzing the KnowledgeC.db with AXIOM
Magnet AXIOM has numerous artifacts derived from the KnowledgeC.db found on both iOS and macOS. In this Tips & Tricks session, we’ll highlight how examiners can use this database to aid in their investigations, shedding light on the pattern of life usage of the device being analyzed, as well as how to build timelines from the information found within.