September 2008
Intermediate to advanced
140 pages
3h 31m
English
Content preview from iPhone Forensics
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Device Backups
If the iPhone was damaged or destroyed, it may not be possible to get as much information off of it. This is when the device’s backup files are of particular importance. Any time an iPhone is synced with a desktop machine, a backup of its configuration, address book, SMS database, camera photo cache, and other personal data is stored on the desktop in backup files. Each device paired with the desktop is assigned a special backup directory named after the device’s unique identifier. Within this directory can be found a backup manifest, device information, and the individual data files. These files are normally copied back to the device in the event that the device is restored to its factory settings by the owner. While a suspect could manually delete such backups, many are not aware that such backups are being made, or choose to store the backups anyway.
Note
The serial number of the iPhone can also be found in device backup files on the desktop machine.
Device backups can be found in the following locations, depending on your operating system:
| Operating system | Location |
|---|---|
| Mac OS X | /Users/username/Library/Application
Support/MobileSync/Backup/deviceid |
| Windows XP | C:\Documents and
Settings\username\Application
Files\MobileSync\Backup\deviceid |
| Windows Vista | C:\Users\username\AppData\Roaming\Apple
Computer\MobileSync\Backup\deviceid |
The backup manifest file, Info.plist, contains a device profile including the serial number of the paired device, firmware revision, phone number, and timestamp. ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.