Donncha Ó Cearbhaill 06a949dafe Resolve WhatsApp LID chat identifiers via the LID pair table ...

Recent WhatsApp versions key 1:1 chat sessions by an opaque LID rather
than the contact's phone number. Extract the ZWAPHONENUMBERLIDPAIR
table from the dedicated LID.sqlite database (or from ChatStorage
itself in versions that store it there) and use it to populate
partner_resolved_phone_number on chat session records and in timeline
events, without requiring the often-missing ContactsV2.sqlite. Each
pair is also extracted as a record and produces a lid_pair_recorded
timeline event marking when the association was learned.

2026-08-19 13:06:41 +02:00

..

android

Store message URLs in analysis output (#856)

2026-08-05 23:21:14 +02:00

img

Update documentation on making backups with Finder

2023-02-21 14:31:44 -05:00

ios

Resolve WhatsApp LID chat identifiers via the LID pair table

2026-08-19 13:06:41 +02:00

command_completion.md

Add shell completion command (#817)

2026-07-01 12:35:21 +02:00

custom_commands.md

Add extensible CLI commands (#853)

2026-08-05 23:30:28 +02:00

development.md

Add iOS sysdiagnose checking (#832)

2026-07-28 18:59:58 +02:00

docker.md

Document iOS device access from Docker (#875)

2026-08-17 13:42:22 +02:00

index.md

Update docs to point to Security Lab website

2023-11-08 16:42:44 +01:00

install.md

Documentation tweaks (#599)

2025-01-14 13:12:10 +01:00

introduction.md

Add docs explaining how to seek expert help for forensic analysis (#476)

2024-04-08 18:47:59 +02:00

iocs.md

Parallelize URL indicator checks (#844)

2026-07-27 15:03:02 +02:00

license.md

First commit

2021-07-16 08:05:01 +02:00

mvt.png

First commit

2021-07-16 08:05:01 +02:00