O'Reilly logo

iOS Forensics Cookbook by Mayank Birani, Bhanu Birani

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 6. Forensics Recovery

Forensics recovery is important, as in a few investigation cases there is a need to decrypt information from iOS devices. These devices are in an encrypted form usually. In this chapter, we will focus on various tools and scripts that can be used to read data from the devices under investigation. We are going to cover the following topics:

  • DFU and Recovery modes
  • Extracting and reading data
  • Recovering backups
  • Extracting data from iTunes backups
  • Encrypting and decrypting tools

DFU and Recovery modes

In this section we'll cover both the DFU mode and the Recovery mode separately.

DFU mode

In this section, we will see how to launch the DFU mode, but before that we will explore what DFU means. DFU stands for Device Firmware Upgrade, ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required