Book Image

Practical Mobile Forensics - Third Edition

By : Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
Book Image

Practical Mobile Forensics - Third Edition

By: Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty

Overview of this book

Covering up-to-date mobile platforms, this book will focuses on teaching you the most recent techniques for investigating mobile devices. We delve mobile forensics techniques in iOS 9-11, Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations. By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.
Table of Contents (19 chapters)
Title Page
Copyright and Credits
Packt Upsell
Contributors
Preface
5
iOS Data Analysis and Recovery

Working with Oxygen Forensic Detective


Oxygen Forensic Detective is a piece of advanced forensic software capable of extracting and analyzing data from cell phones, smartphones, PDAs, and other mobile devices. The software provides not only acquisition support, but also advanced application parsing and analysis support. Currently, Oxygen Forensic Detective version 10 supports more than 17,000 different models of mobile devices.

Oxygen Forensic Detective uses proprietary low-level protocols to extract data from smartphones. Besides data extraction, Oxygen Forensic Detective also gives you the opportunity to import a backup or image file obtained using other forensic tools, such as Cellebrite, Elcomsoft, XRY, iTunes, and open source tools for data analysis. It also stores the database of all the analyzed devices so that you can always view the previously extracted data.

Features of Oxygen Forensic Detective

The following are the features of Oxygen Forensic Detective:

  • It supports logical filesystem...