Book Image

Practical Mobile Forensics - Second Edition

By : Heather Mahalik, Rohit Tamma, Satish Bommisetty
Book Image

Practical Mobile Forensics - Second Edition

By: Heather Mahalik, Rohit Tamma, Satish Bommisetty

Overview of this book

Mobile phone forensics is the science of retrieving data from a mobile phone under forensically sound conditions. This book is an update to Practical Mobile Forensics and it delves into the concepts of mobile forensics and its importance in today's world. We will deep dive into mobile forensics techniques in iOS 8 - 9.2, Android 4.4 - 6, and Windows Phone devices. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from cloud, and document and prepare reports for your investigations. By the end of this book, you will have mastered the current operating systems and techniques so you can recover data from mobile devices by leveraging open source solutions.
Table of Contents (19 chapters)
Practical Mobile Forensics - Second Edition
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Preface

Property lists


A property list, commonly referred to as a plist, is a structured data format used to store, organize, and access various data types of data on an iOS device as well as a Mac OS X device. Plists are binary-formatted files, and they can be viewed using a Property List Editor, which is capable of reading or converting the binary format to ASCII.

Plist files may or may not have a .plist file extension. To access the data stored in these files, you need a tool that can read them. Some of the good free tools include the following:

You can also view the plist files using XCode. Mac OS X includes the plutil command-line utility by default. The command-line utility can easily convert the binary-formatted files into human readable files. In addition to this, most commercial forensic tools, such as Oxygen Forensics, include great support to parse plist...