O'Reilly logo

iPhone and iOS Forensics by Katie Strzempka, Andrew Hoog

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Appendix B. Tools to analyze common file and data types
There are several file types and pieces of data that cannot be viewed using standard applications. The following lists out many of the common file and data types recovered from an iPhone as well as what applications can be used to view these files:
Property Lists (plists): Any text editor can be used to view a plist. Plutil can be used to convert from binary to XML (http://scw.us/iPhone/plutil/)
SQLite database: SQLite Database Browser (http://sqlitebrowser.sourceforge.net/)
Unix Epoch Timestamps: Epoch Converter Website (http://www.epochconverter.com/)
Mac OS X Epoch Timestamps: CFAbsoluteTimeConverter (http://www.macupdate.com/app/mac/37446/cfabsolutetimeconverter)
Disk Image File ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required