13 Advanced iOS Analysis

In 2017, the International Data Corporation (IDC) reported that although Android and iOS mobile devices dominated the mobile market worldwide, it was the first year a decline (of 0.7 percent) in shipments was observed. In 2018, Android consistently has been leading, with an 84.8 percent share, with Apple at 15.1 percent (www.idc.com/promo/smartphone-market-share/os). That leaves little doubt that these two types of devices also dominate the workload of most mobile device forensic examiners. This chapter deals specifically with the examination of the iOS file system structure, which is available with a simple logical extraction or via a backup import created with iTunes.

Automated tools can be used to extract a lot of ...

Get Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation, Second Edition, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.