Smartphone Forensics Moves Fast. Stay Current or You May Miss Relevant Evidence!

How have smartphone OS upgrades to iOS 8 and Lollipop changed the game of forensics? The goal of this talk will be to cover new locations for data storage, how the tools stand up to the changes and how to manually recover data that the tools miss. We will look at residual data from older OSs on Android and iOS (because an upgrade doesn't delete the old data) and determine how the data is parsed and decoded while staying within a limited budget.