Equipment You’ll Need
In order to process an iPhone as evidence, you’ll need the following:
A desktop/notebook machine running either Mac OS X Leopard or Windows XP. The tools used in this book are also compatible with Tiger and Vista but are not as widely tested. Examples in this book are provided for both operating systems, so use whichever you’re most comfortable with. Due to the compatibility of the iPhone and its native HFS filesystem, however, it is easier to operate on the iPhone’s live filesystem using a Leopard-based Mac.
An iPhone USB dock connector or cable. This will be required to install the forensics recovery toolkit into a nondestructive location on the device and to keep the device charged during the recovery process.
A working Wi-Fi connection on your desktop machine and an access point to which both the iPhone and the desktop can connect (preferably securely). In the event that you don’t have access to an access point that is isolated from other machines on the network, this book also provides instructions for creating an ad-hoc network. In most cases, disk copies can be performed over an SSH tunnel to further secure the data while in transit.
An implementation of SSH (Secure Shell) on your desktop, including
sshandscptools. These are part of the OpenSSH package, and can also be found in the free SSH packages at http://www.ssh.fi.The iTunes software from Apple. Versions 7.6 (for firmware v1.x) and 7.7 (for firmware v2.x) were used for this book, but other versions ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access