Sign In Start Free Trial

Book Overview & Buying
Table Of Contents

Practical Mobile Forensics - Third Edition

By : Rohit Tamma, Heather Mahalik, Satish Bommisetty, Oleg Skulkin

4.8 (8)

Practical Mobile Forensics

4.8 (8)

By: Rohit Tamma, Heather Mahalik, Satish Bommisetty, Oleg Skulkin

Overview of this book

Covering up-to-date mobile platforms, this book will focuses on teaching you the most recent techniques for investigating mobile devices. We delve mobile forensics techniques in iOS 9-11, Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations. By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.

Free Chapter

Introduction to Mobile Forensics

Introduction to Mobile Forensics

Why do we need mobile forensics?

Mobile forensics

The mobile phone evidence extraction process

Practical mobile forensic approaches

Potential evidence stored on mobile phones

Examination and analysis

Rules of evidence

Good forensic practices

Summary

Understanding the Internals of iOS Devices

Understanding the Internals of iOS Devices

iPhone models

iPhone hardware

iPad models

Understanding the iPad hardware

Apple Watch models

Understanding the Apple Watch hardware

The filesystem

The HFS Plus filesystem

The APFS filesystem

Disk layout

iPhone operating system

Summary

Data Acquisition from iOS Devices

Data Acquisition from iOS Devices

Operating modes of iOS devices

Logical acquisition

Filesystem acquisition

Physical acquisition

Summary

Data Acquisition from iOS Backups

Data Acquisition from iOS Backups

iTunes backup

Extracting unencrypted backups

Encrypted backup

Working with iCloud backups

Summary

iOS Data Analysis and Recovery

iOS Data Analysis and Recovery

Timestamps

Summary

iOS Forensic Tools

iOS Forensic Tools

Working with Cellebrite UFED Physical Analyzer

Working with Magnet AXIOM

Working with Belkasoft Evidence Center

Working with Oxygen Forensic Detective

Summary

Understanding Android

Understanding Android

The evolution of Android

The Android model

Android security

The Android file hierarchy

The Android file system

Summary

Android Forensic Setup and Pre-Data Extraction Techniques

Android Forensic Setup and Pre-Data Extraction Techniques

Setting up the forensic environment for Android

Screen lock bypassing techniques

Gaining root access

Summary

Android Data Extraction Techniques

Android Data Extraction Techniques

Data extraction techniques

Summary

Android Data Analysis and Recovery

Android Data Analysis and Recovery

Analyzing an Android image

Android data recovery

Summary

Android App Analysis, Malware, and Reverse Engineering

Android App Analysis, Malware, and Reverse Engineering

Analyzing Android apps

Reverse engineering Android apps

Android malware

Summary

Windows Phone Forensics

Windows Phone Forensics

Windows Phone OS

Security model

Windows Phone filesystem

Data acquisition

Commercial forensic tool acquisition methods

Key artifacts for examination

Summary

Parsing Third-Party Application Files

Parsing Third-Party Application Files

Third-party application overview

Encoding versus encryption

Application data storage

Forensic methods used to extract third-party application data

Summary

Other Books You May Enjoy

Other Books You May Enjoy

Leave a review - let other readers know what you think

iPhone hardware

The iPhone is a collection of modules, chips, and electronic components from different manufacturers. Due to the complexities of the iPhone, the list of hardware components is extensive and each device should be researched for internal components.

The following images show the internals of the iPhone 8. The images were taken after dismantling the iPhone 8. Internal images for all iPhones can be found in the teardown section at https://www.ifixit.com/Device/iPhone.

This is the front of the dismantled iPhone 8:

The iPhone 8 teardown image—front (https://www.ifixit.com/Teardown/iPhone+8+Teardown/97481)

This is the back of the dismantled iPhone 8:

The iPhone 8 teardown image—back (https://www.ifixit.com/Teardown/iPhone+8+Teardown/97481)

CONTINUE READING

83

Tech Concepts

36

Programming languages

73

Tech Tools

Unlimited access to the largest independent learning library in tech of over 8,000 expert-authored tech books and videos.

Innovative learning tools, including AI book assistants, code context explainers, and text-to-speech.

50+ new titles added per month and exclusive early access to books as they are being written.

Practical Mobile Forensics

Search

Your notes and bookmarks