Practical Mobile Forensics - Third Edition

 iTunes backup parsing and analysis with Belkasoft Evidence Center

As backup processing and analysis is one of the best features of Belkasoft Evidence Center, here we are going to walk you through this process:

1. Let's start by creating a new case:

Creating a new case

2. There are multiple options here—you can process a previously acquired image, for example, iTunes backup, or choose to extract data from a device first. As we have decided to work with an iTunes backup, let's choose the Mobile image option:

Choosing the data source

3. Make sure ...