2. Understanding the Internals of iOS Devices | Practical Mobile Forensics

Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Practical Mobile Forensics

4.4 (11)

Practical Mobile Forensics

4.4 (11)

Overview of this book

The book is an easy-to-follow guide with clear instructions on various mobile forensic techniques. The chapters and the topics within are structured for a smooth learning curve, which will swiftly empower you to master mobile forensics. If you are a budding forensic analyst, consultant, engineer, or a forensic professional wanting to expand your skillset, this is the book for you. The book will also be beneficial to those with an interest in mobile forensics or wanting to find data lost on mobile devices. It will be helpful to be familiar with forensics in general but no prior experience is required to follow this book.

Preface

Preface

What this book covers

What you need for this book

Who this book is for

Conventions

Reader feedback

Customer support

Free Chapter

1. Introduction to Mobile Forensics

1. Introduction to Mobile Forensics

Mobile forensics

Mobile phone evidence extraction process

Practical mobile forensic approaches

Potential evidence stored on mobile phones

Rules of evidence

Good forensic practices

Summary

2. Understanding the Internals of iOS Devices

2. Understanding the Internals of iOS Devices

iPhone models

iPhone hardware

iPad models

iPad hardware

File system

The HFS Plus file system

Disk layout

iPhone operating system

Summary

3. Data Acquisition from iOS Devices

3. Data Acquisition from iOS Devices

Operating modes of iOS devices

Physical acquisition

Acquisition via a custom ramdisk

Acquisition via jailbreaking

Summary

4. Data Acquisition from iOS Backups

4. Data Acquisition from iOS Backups

iTunes backup

iCloud backup

Summary

5. iOS Data Analysis and Recovery

5. iOS Data Analysis and Recovery

Timestamps

SQLite databases

Property lists

Other important files

Recovering deleted SQLite records

Summary

6. iOS Forensic Tools

6. iOS Forensic Tools

Elcomsoft iOS Forensic Toolkit

Oxygen Forensic Suite 2014

Cellebrite UFED Physical Analyzer

Paraben iRecovery Stick

Open source or free methods

Summary

7. Understanding Android

7. Understanding Android

The Android model

Android security

Android file hierarchy

Android file system

Summary

8. Android Forensic Setup and Pre Data Extraction Techniques

8. Android Forensic Setup and Pre Data Extraction Techniques

A forensic environment setup

Screen lock bypassing techniques

Gaining root access

Summary

9. Android Data Extraction Techniques

9. Android Data Extraction Techniques

Imaging an Android Phone

Data extraction techniques

Summary

10. Android Data Recovery Techniques

10. Android Data Recovery Techniques

Data recovery

Summary

11. Android App Analysis and Overview of Forensic Tools

11. Android App Analysis and Overview of Forensic Tools

Android app analysis

Reverse engineering Android apps

Forensic tools overview

Cellebrite – UFED

MOBILedit

Autopsy

Summary

12. Windows Phone Forensics

12. Windows Phone Forensics

Windows Phone OS

Windows Phone file system

Data acquisition

Summary

13. BlackBerry Forensics

13. BlackBerry Forensics

BlackBerry OS

Data acquisition

BlackBerry analysis

Summary

Index

Index

iPad models

The Apple iPhone changed the way cell phones are produced and used. Similarly, the iPad, a version of the tablet computer introduced in January 2010, squashed the sales of notebooks. With the iPad, individuals can shoot video, take photos, play music, read books, browse the Internet, and do much more. Various iPad models exist now with different features and storage capabilities. The following table lists all the iPad models and their initial iOS versions. Details on identifying iPad models can be found at http://support.apple.com/kb/ht5452.

Device	Model	Initial OS	Internal name	Identifier	Release date
iPad - Wi-Fi	A1219	iOS 3.2	K48AP	iPad 1,1	January 2010
iPad - 3G	A1337	iOS 3.2		iPad 1,1	January 2010
iPad 2 - Wi-Fi	A1395		K93AP	iPad 2,1	March 2011
iPad 2 - GSM	A1396	iOS 4.3	K94AP	iPad 2,2
iPad 2 - CDMA	A1397		K95AP	iPad 2,3
iPad 2 - Wi-Fi rev	A1395		K93AAP	iPad 2,4	March 2012
iPad 3 - Wi-Fi	A1416		J1AP	iPad 3,1
iPad 3 - Wi-Fi + Cellular Verizon	A1403	iOS...

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Practical Mobile Forensics

Search

Your notes and bookmarks