Apple Push Notification Service (APNs) tokens and Google Firebase Cloud Messaging (FCM) tokens are powerful investigative tools that help link anonymous accounts to specific devices, track suspect movements, and establish critical digital evidence timelines. This session will cover how investigators can obtain APNs and FCM token data from companies, the legal process for subpoenas and search warrants, and key forensic artifacts that reveal where push token data are stored on devices. Attendees will learn how push notification data corroborate suspect activity, strengthen investigative leads, and support legal proceedings. Designed for investigators, analysts, and forensic examiners, this session equips attendees with essential knowledge on leveraging push tokens data in CAC investigations and digital forensic examinations.
Learning Objectives:
Describe steps to use push tokens in CAC investigations.
Identify, and distinguish between Apple APNs and Google FCM push tokens.
Define push tokens and their necessity for apps that do push notification.
