A key aspect in iPhone forensics is to examine and analyze the data acquired from an iPhone to interpret the evidence. Data on most iOS devices is encrypted and requires that the data partition be decrypted prior to an examination. In the previous chapters, you learned various techniques to acquire data from an iPhone. The raw disk image obtained during physical acquisition, the file system dump or the logical/backup file contains hundreds of data files. This chapter will help you to understand how data is stored on the iPhone and will walk you through the important files in order to recover the most data possible.
Practical Mobile Forensics
Practical Mobile Forensics
Overview of this book
Related Content you might be interested in
Current Title:
Practical Mobile Forensics
No titles found
Table of Contents (20 chapters)
Practical Mobile Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Introduction to Mobile Forensics
Understanding the Internals of iOS Devices
Data Acquisition from iOS Devices
Data Acquisition from iOS Backups
iOS Data Analysis and Recovery
iOS Forensic Tools
Understanding Android
Android Forensic Setup and Pre Data Extraction Techniques
Android Data Extraction Techniques
Android Data Recovery Techniques
Android App Analysis and Overview of Forensic Tools
Windows Phone Forensics
BlackBerry Forensics
Index
Customer Reviews