Alexis Brignoni  

1.8K Followers
667 Following
1.6K Posts

Digital forensics nerd. Opinions are mine and subject to change. He/Him.

#DFIR #DigitalForensics #FOSS #Python #OSDF #MobileForensics

Whoami?
πŸ–₯ Developer of open-source tools for digital forensics (iLEAPP, ALEAPP, & RLEAPP.)
πŸ“± Digital forensics examiner specializing in mobile forensics.
πŸ”Š Public speaker on cybersecurity and digital investigations.
πŸƒβ€‹ Certified Digital Forensics Memer

Bloghttps://abrignoni.blogspot.com
Githubhttps://github.com/abrignoni
Threadshttps://www.threads.net/@4n6_abrignoni
Mischttps://linqapp.com/abrignoni
If you use #LLM technologies on #DigitalForensics cases you could be creating case law. Proceed with caution.

How true or false is yet to be seen. And we will know the answer soon enough...

#DigitalForensic #MobileForensics #AI #LLMs

Are LLMs a technology I currently support for #DigitalForensics? No.

Do LLMs have issues with hallucinations and pattern matching errors? Yes.

Can LLMs provide value? Yes.

Will LLMs become unavoidable due to tool availability and market requests? Absolutely.

What does this mean to us? We have to become experts with deep skills. If the machine lies to you and you don't know how to find out, what do you think will happen?

We need to become experts over expert systems. Be ready for everything.

Latest Digital Forensics Now Podcast episode straight from the MSAB Digital Summit 2026 is available to watch on YouTube or listened to from any of your favorite podcasting directories.

Check it out:
YouTube
https://youtu.be/0otgZswj0M4

#DigitalForensics #MobileForensics #DFIR #AI

Digital Forensics Now Podcast S3 - 3

YouTube

Apropos to my latest LinkedIn posts on LLM tooling in #DigitalForensics.

Post 1 : https://tinyurl.com/yenesis1
Post 2: https://tinyurl.com/yenesis11

@CTHW good luck finding any mobile device or modern Internet enabled service that doesn't do that already in some form.

My post has nothing to do with your concern but thanks sharing. πŸ‘

Take care.

In a world where #DigitalForensics is moving to a black box tooling model, having the ability to openly check the code and add functionality is priceless.

How can you support open source projects?
🧭 Provide code with test data. Anyone can ask an LLM to produce code but providing testing data is divine.
🧭 Help with documentation.
🧭 Donate money to useful projects.
🧭 Share success stories and use cases.
🧭 Help verify data and validate processes. Communicate any issues to developers in a constructive way.
🧭 Give credit. Maintaining a project is not easy. Recognize those that are helping in transparent and dutiful ways.

What other ways to assist did I miss?

@CTHW Why would the OS use a SQLite database for it? At the end of the day, from an investigative standpoint, what's useful is the fact that it tells the examiner when the files were moved and from what account.

What the OS uses it for, if anything, I don't really care for. πŸ™‚

πŸ†• #Android Samsung #Knox (Secure Folder) history log artifact in #ALEAPP.
πŸͺ΅ SQLite database contains a log of items requested be moved in or out of the secure folder in Samsung Android devices.
πŸ‘ Thanks to HSI Digital Forensics Examiner Geovanny Perez for the discovery of this artifact.

#DFIR

Lo mismo dijo acerca del sueldo tambiΓ©n. πŸ˜‚

#PericiaDigitalForense #DigitalForensics #MobileForensics #DFIR