Chapter 4. iPhone Logical Acquisition

One of the functions of the iPhone and iTunes is the ability to back up information in case of a catastrophic failure or to bring the phone to factory settings without losing any previous information. This is done using iDevice Backup in iTunes. There are GUI and command-line tools that can assist in analyzing the data retrieved from the device, and there are even free tools to acquire and analyze the logical data. You can use a combination of tools to assist you in many investigations.

Acquiring Data from iPhone, iPod touch, and iPad

In previous chapters, we analyzed some data from an iDevice. This chapter will focus on the acquisition from an iPhone, iPod touch, or iPad. This procedure can work on locked and ...

Get iOS Forensic Analysis for iPhone, iPad, and iPod touch now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.