O'Reilly logo

Practical Mobile Forensics - Second Edition by Satish Bommisetty, Rohit Tamma, Heather Mahalik

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

File system acquisition

The term file system acquisition was first introduced by Cellebrite, but has since been adopted by other commercial forensic tools and is sometime referred to as advanced logical acquisition. This method of acquisition enables the examiner to gain more data than obtained via a logical acquisition because it provides access to file system data. While this is not a substitute for a physical acquisition, it is the next best thing. For most iOS devices, which are not jailbroken, a file system image is the most data that we can obtain from the device using conventional methods.

This method of acquisition provides access to the user data partition only. The system partition of the device is only acquired via physical access. Should ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required