iPhone Forensics

Preface

The iPhone has quickly become a market leader in mobile technology, finding its way into the corporate world and the everyday lives of millions of end users. The iPhone’s wide range of functionality, combined with its mobile, “always on” design, has allowed it to be used as a functional mobile office. The cost of this productivity is the danger of storing sensitive data on the device. Any given iPhone is likely to contain sensitive information belonging to its owner, and some types of information that may belong to others—corporate email, documents, and photos, to name a few.

As the dark side of such a versatile device becomes more evident, so does a need to recover personal information from it.

Problem employees engage in activities that put the company at risk, sometimes leaving an evidence trail on corporately owned equipment. The use of digital forensics has become an effective tool in conducting investigations and evaluating what activities a suspect employee has engaged in. Recovering deleted email, voicemail, photos, and other digital evidence can expose an employee who is stealing from the company, having an affair at work, or committing other acts that a corporation may need to investigate.

Outside the corporate world, criminals have also adopted the iPhone. Over the past several months, much of the forensic information contained in this book has been used by over 200 different law enforcement agencies throughout the world to conduct electronic discovery and ultimately ...