https://www.messagingforensics.com/en/blog Latest from Blog en Fri, 25 Sep 2026 19:14:02 GMT https://www.messagingforensics.com/en/blog/discord-data-package-forensics https://www.messagingforensics.com/en/blog/discord-data-package-forensics What the Discord data package contains, why it only holds the owner's messages, how to decode snowflake IDs, and when to use DiscordChatExporter output. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.messagingforensics.com/en/blog/email-header-forensics https://www.messagingforensics.com/en/blog/email-header-forensics Read Received chains bottom-up, compare Return-Path, From and Reply-To, interpret SPF/DKIM/DMARC results and decode MIME across EML, MBOX, MSG and PST. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.messagingforensics.com/en/blog/imessage-chat-db-forensics https://www.messagingforensics.com/en/blog/imessage-chat-db-forensics How to acquire macOS chat.db and iOS sms.db, read the message tables, convert Cocoa timestamps, and recover text, edits, unsends and tapbacks. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.messagingforensics.com/en/blog/microsoft-teams-forensics https://www.messagingforensics.com/en/blog/microsoft-teams-forensics Acquire Teams chats via Purview eDiscovery, the Microsoft Graph chatMessage API or a Teams (free) export, and know which fields, edits and deletions matter. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.messagingforensics.com/en/blog/slack-export-forensics https://www.messagingforensics.com/en/blog/slack-export-forensics What a Slack workspace export contains, how to read ts, thread_ts, edits, tombstones and message markup, what exports leave out, and how to verify integrity. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.messagingforensics.com/en/blog/what-is-messaging-forensics https://www.messagingforensics.com/en/blog/what-is-messaging-forensics Messaging forensics explained: acquisition options, a normalized message model, the timestamp zoo, evidence hashing and the pitfalls that break timelines. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT https://www.messagingforensics.com/en/blog/whatsapp-forensics https://www.messagingforensics.com/en/blog/whatsapp-forensics Where WhatsApp evidence lives on Android and iOS, how chat exports, msgstore.db and ChatStorage.sqlite differ, and how to read their timestamps correctly. Florian Amette Fri, 25 Sep 2026 00:00:00 GMT