The first step in a forensic examination of an iOS device should be identifying the device model. The model of an iOS device can be used to help the examiner develop an understanding of the underlying components and capabilities of the device, which can be used to drive the methods for acquisition and examination. Legacy iOS devices should not be disregarded because they may surface as part of an investigation. Examiners must be aware of all iOS devices as old devices are sometimes still in use and may be tied to a criminal investigation. The next chapter will provide tips and techniques for acquiring data from the iOS devices discussed in this chapter.
Practical Mobile Forensics
Practical Mobile Forensics
Overview of this book
Related Content you might be interested in
Current Title:
Practical Mobile Forensics
No titles found
Table of Contents (20 chapters)
Practical Mobile Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Introduction to Mobile Forensics
Understanding the Internals of iOS Devices
Data Acquisition from iOS Devices
Data Acquisition from iOS Backups
iOS Data Analysis and Recovery
iOS Forensic Tools
Understanding Android
Android Forensic Setup and Pre Data Extraction Techniques
Android Data Extraction Techniques
Android Data Recovery Techniques
Android App Analysis and Overview of Forensic Tools
Windows Phone Forensics
BlackBerry Forensics
Index
Customer Reviews