Book Image

iOS Forensics Cookbook

By : Bhanu Birani, Mayank Birani
Book Image

iOS Forensics Cookbook

By: Bhanu Birani, Mayank Birani

Overview of this book

Mobile device forensics is a branch of digital forensics that involves the recovery of evidence or data in a digital format from a device without affecting its integrity. With the growing popularity of iOS-based Apple devices, iOS forensics has developed immense importance. To cater to the need, this book deals with tasks such as the encryption and decryption of files, various ways to integrate techniques withsocial media, and ways to grab the user events and actions on the iOS app. Using practical examples, we’ll start with the analysis keychain and raw disk decryption, social media integration, and getting accustomed to analytics tools. You’ll also learn how to distribute the iOS apps without releasing them to Apple’s App Store. Moving on, the book covers test flights and hockey app integration, the crash reporting system, recovery tools, and their features. By the end of the book, using the aforementioned techniques, you will be able to successfully analyze iOS-based devices forensically.
Table of Contents (13 chapters)

DFU and Recovery modes


In this section we'll cover both the DFU mode and the Recovery mode separately.

DFU mode

In this section, we will see how to launch the DFU mode, but before that we will explore what DFU means. DFU stands for Device Firmware Upgrade, which means this mode is used specifically with iOS upgrades. This is a mode where a device can be connected with iTunes and still do not load the iBoot boot loader. Your device screen will be completely black in DFU mode because neither the boot loader nor the operating system is loaded. DFU bypasses the iBoot so that you can downgrade your device.

How to do it...

We need to follow these steps in order to launch a device in DFU mode:

  1. Turn off your device.

  2. Connect your device to the computer.

  3. Press your Home button and the Power button, together, for 10 seconds.

  4. Now, release the Power button and keep holding the Home button till your computer detects the device that is connected.

  5. After some time, iTunes should detect your device.

  6. Make sure that...