May 2016
Beginner to intermediate
412 pages
8h 53m
English
Apart from SQLite and plist files, several other locations may contain valuable information to an investigation.
The others sources include the following:
Cookies can be recovered from /private/var/mobile/Library/Cookies/Cookies.binarycookies. This file is a standard binary file containing cookies that are saved when web pages are accessed on the device. This information can be a good indication of what websites the user has been actively visiting. Keep in mind that third-party applications may also contain this file.
To convert the binary cookie to human readable format, run the BinaryCookieReader.py Python script on the cookie file, as in ...
Read now
Unlock full access