Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Practical Mobile Forensics
  • Table Of Contents Toc
Practical Mobile Forensics

Practical Mobile Forensics - Third Edition

By : Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
4.8 (8)
Buy this Book
close
close
Practical Mobile Forensics

Practical Mobile Forensics

4.8 (8)
By: Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
Buy this Book

Overview of this book

Covering up-to-date mobile platforms, this book will focuses on teaching you the most recent techniques for investigating mobile devices. We delve mobile forensics techniques in iOS 9-11, Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations. By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.
Table of Contents (14 chapters)
close
close
close
Lock Free Chapter
1
Introduction to Mobile Forensics
Icon
Introduction to Mobile Forensics
Icon
Why do we need mobile forensics?
Icon
Mobile forensics
Icon
The mobile phone evidence extraction process
Icon
Practical mobile forensic approaches
Icon
Potential evidence stored on mobile phones
Icon
Examination and analysis
Icon
Rules of evidence
Icon
Good forensic practices
Icon
Summary
2
Understanding the Internals of iOS Devices
Icon
Understanding the Internals of iOS Devices
Icon
iPhone models
Icon
iPhone hardware
Icon
iPad models
Icon
Understanding the iPad hardware
Icon
Apple Watch models
Icon
Understanding the Apple Watch hardware
Icon
The filesystem
Icon
The HFS Plus filesystem
Icon
The APFS filesystem
Icon
Disk layout
Icon
iPhone operating system
Icon
Summary
3
Data Acquisition from iOS Devices
Icon
Data Acquisition from iOS Devices
Icon
Operating modes of iOS devices
Icon
Logical acquisition
Icon
Filesystem acquisition
Icon
Physical acquisition
Icon
Summary
4
Data Acquisition from iOS Backups
Icon
Data Acquisition from iOS Backups
Icon
iTunes backup
Icon
Extracting unencrypted backups
Icon
Encrypted backup
Icon
Working with iCloud backups
Icon
Summary
5
iOS Data Analysis and Recovery
Icon
iOS Data Analysis and Recovery
Icon
Timestamps
Icon
Summary
6
iOS Forensic Tools
Icon
iOS Forensic Tools
Icon
Working with Cellebrite UFED Physical Analyzer
Icon
Working with Magnet AXIOM
Icon
Working with Belkasoft Evidence Center
Icon
Working with Oxygen Forensic Detective
Icon
Summary
7
Understanding Android
Icon
Understanding Android
Icon
The evolution of Android
Icon
The Android model
Icon
Android security
Icon
The Android file hierarchy
Icon
The Android file system
Icon
Summary
8
Android Forensic Setup and Pre-Data Extraction Techniques
Icon
Android Forensic Setup and Pre-Data Extraction Techniques
Icon
Setting up the forensic environment for Android
Icon
Screen lock bypassing techniques
Icon
Gaining root access
Icon
Summary
9
Android Data Extraction Techniques
Icon
Android Data Extraction Techniques
Icon
Data extraction techniques
Icon
Summary
10
Android Data Analysis and Recovery
Icon
Android Data Analysis and Recovery
Icon
Analyzing an Android image
Icon
Android data recovery
Icon
Summary
11
Android App Analysis, Malware, and Reverse Engineering
Icon
Android App Analysis, Malware, and Reverse Engineering
Icon
Analyzing Android apps
Icon
Reverse engineering Android apps
Icon
Android malware
Icon
Summary
12
Windows Phone Forensics
chevron up
Icon
Windows Phone Forensics
Icon
Windows Phone OS
Icon
Security model
Icon
Windows Phone filesystem
Icon
Data acquisition
Icon
Commercial forensic tool acquisition methods
Icon
Key artifacts for examination
Icon
Summary
13
Parsing Third-Party Application Files
Icon
Parsing Third-Party Application Files
Icon
Third-party application overview
Icon
Encoding versus encryption
Icon
Application data storage
Icon
Forensic methods used to extract third-party application data
Icon
Summary
14
Other Books You May Enjoy
Icon
Other Books You May Enjoy
Icon
Leave a review - let other readers know what you think

Windows Phone filesystem

The Windows Phone filesystem is more or less similar to the filesystems used in Windows 7, Windows 8, and Windows 10. From the root directory, one can reach different files and folders that are available on this device. From a forensic perspective, the following are some of the folders that can yield valuable data. All the listed directories are located in the root directory:

  • Application data: This directory contains data of preinstalled apps on the phone, such as Outlook, Maps, and Internet Explorer.
  • Applications: This directory contains the apps installed by the user. The isolated storage, which is allocated or used by each app, is also located in this folder.
  • My Documents: This directory holds different Office documents, such as Word, Excel, or PowerPoint files . The directory also includes configuration files and multimedia files, such as music or videos.
  • Windows: This directory contains files that are related to the Windows Phone operating system.

The acquisition...

Visually different images
CONTINUE READING
83
Tech Concepts
36
Programming languages
73
Tech Tools
Icon Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.
Icon Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.
Icon 50+ new titles added per month and exclusive early access to books as they are being written.
Practical Mobile Forensics
End of Section 12
Next Section
notes
bookmark Notes and Bookmarks search Search in title playlist Add to playlist font-size Font size

Change the font size

margin-width Margin width

Change margin width

day-mode Day/Sepia/Night Modes

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Confirmation

Modal Close icon
claim successful
Order Page Read Now

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY

Submit Your Feedback

Modal Close icon
Modal Close icon
Modal Close icon