January 2018
Beginner to intermediate
402 pages
10h 6m
English
Raw disk images or the backup that you extracted in Chapter 3, Data Acquisition from iOS Devices and Chapter 4, Data Acquisition from iOS Backups should contain the following plist files that are important for an investigation. The files displayed are extracted from an iOS 11 device. The file locations may vary for your iOS version.