O'Reilly logo

Learning iOS Forensics - Second Edition by Pasquale Stirparo, Mattia Epifani

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

iDevice backup acquisition

Backups that are made online are, to all intents and purposes, not encrypted. Technically, they are encrypted, but the encryption key is stored with the encrypted files. Apple made this choice in order for users to be able to restore the backup on a different device from the one that created it. Currently, the acquisition of iCloud backup is supported by various commercial software (Elcomsoft Phone Breaker (EPPB), Passware, Oxygen Forensics Detective, Cellebrite Cloud Analyzer, iPhone Backup Extractor, and Wondershare Dr.Fone) and two open source tools (iLoot, which is available at https://github.com/hackappcom/iloot and works up to iOS 8 and InflatableDonkey, which is available at https://github.com/horrorho/InflatableDonkey ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required