Book Image

Practical Mobile Forensics - Fourth Edition

By : Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
5 (1)
Book Image

Practical Mobile Forensics - Fourth Edition

5 (1)
By: Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty

Overview of this book

Mobile phone forensics is the science of retrieving data from a mobile phone under forensically sound conditions. This updated fourth edition of Practical Mobile Forensics delves into the concepts of mobile forensics and its importance in today's world. The book focuses on teaching you the latest forensic techniques to investigate mobile devices across various mobile platforms. You will learn forensic techniques for multiple OS versions, including iOS 11 to iOS 13, Android 8 to Android 10, and Windows 10. The book then takes you through the latest open source and commercial mobile forensic tools, enabling you to analyze and retrieve data effectively. From inspecting the device and retrieving data from the cloud, through to successfully documenting reports of your investigations, you'll explore new techniques while building on your practical knowledge. Toward the end, you will understand the reverse engineering of applications and ways to identify malware. Finally, the book guides you through parsing popular third-party applications, including Facebook and WhatsApp. By the end of this book, you will be proficient in various mobile forensic techniques to analyze and extract data from mobile devices with the help of open source solutions.
Table of Contents (18 chapters)
Free Chapter
2
Section 1: iOS Forensics
8
Section 2: Android Forensics
14
Section 3: Windows Forensics and Third-Party Apps

iOS Forensic Tools

An examiner like you must not only know how to use forensic tools but must also understand the methods and acquisition techniques that are deployed by the tools you use in your investigations. Apart from saving time, forensic tools also make the process of forensic analysis a lot easier. However, each tool has its flaws. You must catch any mistakes and know how to correct them by leveraging another tool or technique. It's impossible for a tool to support all devices. You are responsible for learning and using the best tools to complete the job. As we discussed in the previous chapters, you must understand how data is stored on iOS devices to ensure that the tool is capturing all the accessible data.

Currently, there are a number of commercial tools, such as Cellebrite UFED Physical Analyzer, BlackBag BlackLight, Oxygen Forensic Detective, Belkasoft Evidence...