As digital forensic examiners, we often find….um….interesting images in web browser caches. In our iOS mobile device extractions, we are presented with tons of thumbnails with the source file of Cache.db. Can we use these as evidence? Are those creation times trustworthy? Nerd out with me on iOS Safari artifacts and see why images end up in cache.db and, more importantly, why you should be VERY careful when using these artifacts as evidence in your cases.