Authors: Luke Jennings, Hugo Espinosa and Matthew Sorell



In this workshop, we’ll explore “healthdb_secure.sqlite” and related records, and how to interpret the various tables, including key changes that have occurred with updates of iOS and WatchOS. There are some traps for the unwary, and some surprising finds for the adventurous.

Next, we’ll step back and take a look at processing chain from sensor to health logs, highlighting what we’ve learned from repeatable scientific experiments and where there are ongoing knowledge gaps.

Finally, we’ll discuss visualisation and interpretation – including limitations – of health data and the extent to which this data can be used as forensic evidence.

The workshop includes a self-paced tutorial which leads into the 2022 DFRWS Rodeo.