Book Image

iOS Forensics Cookbook

By : Birani
Book Image

iOS Forensics Cookbook

By: Birani

Overview of this book

Mobile device forensics is a branch of digital forensics that involves the recovery of evidence or data in a digital format from a device without affecting its integrity. With the growing popularity of iOS-based Apple devices, iOS forensics has developed immense importance. To cater to the need, this book deals with tasks such as the encryption and decryption of files, various ways to integrate techniques withsocial media, and ways to grab the user events and actions on the iOS app. Using practical examples, we’ll start with the analysis keychain and raw disk decryption, social media integration, and getting accustomed to analytics tools. You’ll also learn how to distribute the iOS apps without releasing them to Apple’s App Store. Moving on, the book covers test flights and hockey app integration, the crash reporting system, recovery tools, and their features. By the end of the book, using the aforementioned techniques, you will be able to successfully analyze iOS-based devices forensically.
Table of Contents (9 chapters)

Exploring iExplorer


iExplorer is a tool that allows you to access almost everything on the device. You can migrate music, photos, messages, apps, and so on. It is a paid tool, and it allows you to analyze your device and the data in-depth. You can export and extract almost every sort of file from the device; it also allows you hassle-free access to all your application files where the data can be read.

How to do it...

Perform the following steps to explore devices using the iExplorer tool:

  1. Download the latest iExplorer version for Mac from https://www.macroplant.com/iexplorer/download-ie3-mac.

  2. Now go to your Downloads folder and initiate the installation process.

  3. Then, drag iExplorer to the Applications folder. You can also pin the application on your dock. The iExplorer icon should look similar to the following screenshot:

  4. Now, our installation process is completed. We will now see how to extract and browse our iTunes backups. This tool has a seamless way to parse your old iTunes backups, which...