Learning iOS Forensics PDF

Preface

This book is a complete discussion of state-of-the-art technology used in identification, acquisition, and forensic analysis of mobile devices with the iOS operating system, and it has been extended and updated to iOS 8 and 9. It is a practical guide that will help investigators understand how to manage scenarios efficiently during their daily work on this type of mobile device. The need for a practical guide in this area arises from the growing popularity of iOS devices and the different scenarios that an investigator may face, according to the type of device, the version of the operating system, and the presence or absence of security systems (code lock, backup password, and so on). The book is divided (conceptually) into four parts. The first part deals with the basic concepts related to methods and guidelines to be followed in the treatment of digital evidence and information specific to an iOS device. The second part covers the basic techniques and tools for acquisition of an iOS device, also through a backup and iCloud. The third part goes deep into the methodology and techniques for analyzing the data. Finally, the fourth part provides an overview of issues related to the analysis of iOS applications and malware. For those who are new to this field, we recommend a sequential reading of the book, since the arguments are processed in the order of the main phases of a forensic investigation (identification, acquisition, and analysis). For the more experienced readers, and for those who routinely deal with this type of device, the book can be considered as a useful tool to evaluate different techniques, depending on the type of case that you have to handle.

Author: Mattia Epifani