iOS Forensics for Investigators

Chapter 12: Writing a Forensic Report and Building a Timeline

So far, it has been a journey of testing, acquiring, analyzing, and researching artifacts from iOS devices. We have worked on different methodologies and techniques for extracting data from a device, and we have learned how to analyze this data to highlight the evidence. In this final chapter, we will talk about the best practices and industry standards for writing a mobile forensic report.

We will start the chapter by learning how a report should be structured, what should be included, and how evidence should be reported in an impartial manner. Then, we will learn how to automatically generate a report using forensic software. In the final part of this chapter, we will discuss timelines, ...