To better understand the forensic process of an iOS device, it is good to know about the filesystem that is used. The filesystem used in the iPhone and other Apple iOS devices is HFSX, a variation of HFS Plus with one major difference. HFSX is case-sensitive whereas HFS Plus is case-insensitive. Other differences will be discussed later in this chapter. OS X uses HFS Plus by default and iOS uses HFSX. Apple File System (APFS) was introduced in June 2016 as a replacement for HFS+, and released for iOS devices with the release of iOS 10.3, and for macOS devices with the release of macOS 10.13.
Practical Mobile Forensics
By :
Practical Mobile Forensics
By:
Overview of this book
Covering up-to-date mobile platforms, this book will focuses on teaching you the most recent techniques for investigating mobile devices. We delve mobile forensics techniques in iOS 9-11, Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations.
By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.
Table of Contents (14 chapters)
Free Chapter
Introduction to Mobile Forensics
Understanding the Internals of iOS Devices
Data Acquisition from iOS Devices
Data Acquisition from iOS Backups
iOS Data Analysis and Recovery
iOS Forensic Tools
Understanding Android
Android Forensic Setup and Pre-Data Extraction Techniques
Android Data Extraction Techniques
Android Data Analysis and Recovery
Android App Analysis, Malware, and Reverse Engineering
Windows Phone Forensics
Parsing Third-Party Application Files
Other Books You May Enjoy
How would like to rate this book
Customer Reviews
