O'Reilly logo

iOS Forensics Cookbook by Mayank Birani, Bhanu Birani

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Extracting and reading data

It is very important to understand the basics of the file system before you learn about the ways of extracting and reading data from the iOS device disk. All Apple operating systems use the same file system, hierarchical file system (HFS).

This file system works with the 512 byte-formatted block scheme. To categorize it further, these blocks are divided into two parts: allocation blocks and logical blocks. Logical blocks are available on the volume numbered from the first to the last block. These blocks remain static on the disk. Allocated blocks work with a different strategy; they can be grouped together to utilize the HFS more efficiently. The file structure includes the Allocation and Attributes Files, along with ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required