Book Image

Practical Mobile Forensics - Third Edition

By : Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
Book Image

Practical Mobile Forensics - Third Edition

By: Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty

Overview of this book

Covering up-to-date mobile platforms, this book will focuses on teaching you the most recent techniques for investigating mobile devices. We delve mobile forensics techniques in iOS 9-11, Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations. By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.
Table of Contents (19 chapters)
Title Page
Copyright and Credits
Packt Upsell
Contributors
Preface
5
iOS Data Analysis and Recovery

Working with Belkasoft Evidence Center


Belkasoft Evidence Center is one more popular digital forensics tool capable of acquisition and analysis of iOS devices. Like AXIOM, it can be used for computer, mobile, and cloud forensics. 

One of the best features of Belkasoft Evidence Center is its ability to deal with damaged iTunes backups. So if you have a backup none of your tools are able to process, try Belkasoft Evidence Center; according to our experience, it will process it successfully.

Features of Belkasoft Evidence Center

The following are features of Belkasoft Evidence Center:

  • It supports logical and filesystem (for jailbroken devices) acquisitions
  • It supports both encrypted and unencrypted iTunes backups
  • It supports damaged iTunes backups
  • It recovers more than 700 artifact types
  • It's designed to work with other popular mobile forensics tools, for example, Cellebrite UFED, and XRY
  • It includes built-in SQLite and plist viewers
  • It includes a free scripting module, BelkaScript, allowing examiners...