O'Reilly logo

Learning iOS Forensics - Second Edition by Pasquale Stirparo, Mattia Epifani

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Other iOS forensic traces

In this section, we will list some other locations of interesting artifacts. Those listed here are not strictly related to a particular application, but are rather generated from the usage of the device by the interaction of the user with the system.

Clipboard

The pasteboardDB file under /private/var/mobile/Library/Caches/com.apple.UIKit.pboard is a binary file that contains a cached copy of the data stored on the device's clipboard, which means that the data that have been cut/copied and pasted by the user (that is, passwords or other portions of text that may become relevant) will also be present there.

Keyboard

Two of the iOS features are the auto correction and auto completion of the text while the user is typing. To ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required