Summary

iOS device backups contain essential information that may be your only source of evidence. Information stored in iOS backups includes photos, videos, contacts, e-mail, call logs, user accounts and passwords, applications, device settings, and so on. This chapter covered techniques to create backup files and retrieve data from iTunes and iCloud backups including encrypted backup files, wherever possible. Chapter 6iOS Data Analysis and Recovery, goes further into the forensic investigation by showing the examiner how to analyze the data recovered from the backup files. Areas containing data of potential evidentiary value will be explained in detail. Chapter 6iOS Data Analysis and Recovery, will then teach you how to analyze the data ...

Get Practical Mobile Forensics - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.