September 2008
Intermediate to advanced
140 pages
3h 31m
English
Content preview from iPhone Forensics
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Graphical File Navigation
Both Mac OS X and Windows support preview panes within their file browsers. Mac OS X, in particular, provides a very useful graphical interface for browsing the directories and files created by the data carving described in Chapter 4.
Using Mac OS X, browse to the scalpel-output folder that is created during the data carving process (if you used the Scalpel tool). At the top of the finder window, a series of buttons should be visible, allowing you to select which view mode you’d like to use. Click the rightmost icon, which displays the cover flow view (Figure 5-2).
Figure 5-2. Cover flow view button
The contents of the directory will now appear in a graphical representation, including previews of images, HTML, and other readable files. The entire directory can now be visually examined, saving a considerable amount of time. See Figure 5-3 for an example of the display.
Figure 5-3. Cover flow view of recovered data (Mac OS X)
Many image files are likely to appear more than once, as they are sometimes rewritten when the iPhone syncs with a desktop. Album covers are also likely to appear several times, once for each song.
Images of Interest
Browsing through your recovered images directory may take some time, but can turn up both live and deleted files containing such ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.