iMessages in Encase

To find usefull iMessages on an iPhone, we created a "lightgrep"  grep-expression.
Lightgrep is an addon for Encase that can be very usefull if you use searching with keywords and/or Grep expressions in Encase every now and then.

To find all "complete"  iMessages we used:

iMessagep.[^0A]{50,1024}

This resulted in all the iMessages with a maximum lengt of 1024 (longer ones are cut off)