LAB-TR-0001 Making Silent Failures Visible: A Single-Pass Section Reader for Android Bug Reports DOI Contributory tool Available LAB-TR-0002 What Is Inside an Android Bug Report? A Section Census, Truncation Behavior and a 22-Group Taxonomy Across Vendors Empirical study LAB-TR-0003 Where Android Records Who Used What: App Ops History in Databases, XML Files and Bug Reports DOI Empirical study Available LAB-TR-0004 Informative but Individually Unreliable: An Empirical Study of Android Reset Indicators and Their Clocks DOI Empirical study Available LAB-TR-0005 Hidden Second Users: Measuring Silent Data Loss from First-Match Path Resolution in an Open-Source Android Forensic Parser Empirical study LAB-TR-0006 Empty Is Not Absent: Silent Failure Modes in Open-Source Mobile Forensic Parsers on iOS 26 and Android 16 DOI Empirical study Available LAB-TR-0007 Five Under-Parsed Android System Stores on One UI 8: Smart Switch, Health Connect, Bluetooth OPP, Blocked Numbers and the Telephony Network Log Contributory tool LAB-TR-0008 What iMessage Keeps After You Edit, Unsend, React or Delete: Database Evidence from Nine iPhone Databases on iOS 18 to 26 DOI Empirical study Available LAB-TR-0009 Screen Time on iOS 15 to 27: Mostly Empty Usage Tables and Counts That Change Without the Write-Ahead Log DOI Empirical study Available LAB-TR-0010 Reading New iOS Sysdiagnose Files: Container Manager State, BatteryUI Runtime, Associated Domains, Network Extension, brctl, MC Events and Task Info Contributory tool LAB-TR-0011 Log Compression and Archive Structure in the iOS 27.0 Sysdiagnose: An Early Observation Tested Against Ten Archives DOI Empirical study Available LAB-TR-0012 What the iOS Unified Log Says About Device Security Controls: Most Leave a Trace, Few Record a Change Empirical study Available LAB-TR-0013 Residual Traces of Removed Messages in the iOS Unified Log: An Observational Study Empirical study Available LAB-TR-0014 Validating Community Forensic Parsers: Synthetic Fixtures, Independent Recounts, Leak Scans and the Limits of AI-Agent Self-Reports Empirical study LAB-TR-0015 Parsing Apple Sysdiagnose, Unified Logs and Android Bug Reports: A Review of Public Research and Tools Review Available LAB-TR-0016 Seven Kilobytes per Event: Storage Amplification and Memory Peaks When Persisting Parsed Log Events from Android Bug Reports White paper On hold LAB-TR-0017 Where Device Security Settings Live on Disk: A Verified Path and Key Map for Unmanaged iPhones and Android Phones, and Pitfalls That Produce Silent Empty Reads White paper Available LAB-TR-0019 Not Found Is Not Off: Evidence-State Accounting for Reconstructing Phone Security Settings from Full File Systems and Android Bug Reports Empirical study Available LAB-TR-0020 Extracting Event Categories from Multi-Million-Line Mobile Logs with Predicate Rules: Design Rationale and a Repeatable Rule-Construction Method Method and evaluation Available LAB-TR-0021 Retention Horizons of Volatile Stores in iOS and Android Extractions Empirical study Available LAB-TR-0022 Most Ordinary Phones Trip a Naive Clock-Anomaly Check: Base Rates of Clock Anomalies in Unselected Mobile Extractions Empirical study Available LAB-TR-0023 Zeroed Cells, Kept Pages, Pending Logs: What SQLite Leaves of a Deleted Row on 47 iOS and Android Devices Empirical study Available LAB-TR-0024 How Much of a Full File System Extraction Is Needed? Measuring Over-Collection and Third-Party Data in iOS and Android Extractions Empirical study Available LAB-TR-0028 Device-Life Boundary Indicators and the Classification of Restored Versus Native Records on Android Empirical study Available LAB-TR-0029 Measuring the Answerability of Date-Bound Questions from Mobile Device Extractions Empirical study Available LAB-TR-0030 Upper Bounds on Record Loss from Identifier Counters in Android Media and Message Stores Empirical study Available LAB-TR-0031 The Footprint of Acquisition on an Android Phone: Footprint Classes, a Separation Rule, and Base Rates in Research Devices Empirical study Available LAB-TR-0032 Resilience of Mobile Forensic Findings to the Loss of a Single Data Store Formal framework with evaluation Available LAB-TR-0033 Synthetic Android Phones That Match Measured Ones Feature by Feature but Not Across Stores: A Calibrated Generator and Benchmark Method with evaluation Available LAB-TR-0034 What an Empty Result Licenses: A Sound Calculus of Absence Claims for Phone Evidence Formal framework with evaluation Available LAB-TR-0035 Where Removed Apps Leave Traces: A Per-Store Measurement on Android and iOS Phones Empirical study Available LAB-TR-0036 The iPhone Inactivity Restart in a Research Corpus: Rare, Near 72 Hours, and Readable Only Briefly Empirical study Available LAB-TR-0037 Silent Parser Failures Hide Findings and Invent Deletions Under Stated Decision Rules: A Fault-Injection Study on Synthetic Phones Simulation study Available LAB-TR-0038 A Calculus of Temporal Uncertainty for Ordering Phone Timestamps over Clock Domains Formal framework with evaluation Available LAB-TR-0039 Can a Finding Be Traced to Its Bytes? Lineage Coverage of a Phone-Forensic Reconstruction Formal framework with evaluation Available LAB-TR-0040 Who Changed the Phone? When Acquirer-Induced Changes Can and Cannot Be Told Apart from the User’s Own Formal framework with evaluation Available LAB-TR-0041 Attributing Interior Gaps in Phone Logs to Restarts, Log Rotation and Clock Steps Measurement study with an attribution method Available 