The Belkasoft Evidence Center program has already been described previously in Chapter 2, Android Devices Acquisition. This program has the functionality for analyzing the plist-files of mobile devices. In this chapter, we will describe how to analyze plist-files via Belkasoft Evidence Center.
- Double-click on the Belkasoft Evidence Center icon. When the program starts, click
New Case
. In the opened window, enter the data for the new case, specify the path where the case files will be saved, and click theCreate and open
button.
- Since in the Belkasoft Evidence Center program there is no option to select a separate file for analysis, you must specify the folder that contains one or more plist-file as a data source.
- In the new
Add data source
window, specify the path to the plist-files that you want to analyze and click theNext
button:
Add data source window
- In the next window, select the artifacts categories that are relevant to the iOS...