Practical Mobile Forensics - Third Edition

Setting up the forensic environment

Nowadays we have a few tools that can be used by mobile forensic examiners to acquire and analyze iOS devices using both a Mac and a Windows system as the host. For example, Elcomsoft iOS Forensic Toolkit has both Mac and Windows versions; as for free and open source tools, the libimobiledevice library can be used not only on Mac and Windows forensic workstations, but even on Linux!

We are going to introduce you to these tools, with hands-on exercises, of course, including practical logical tools, filesystem and physical acquisitions, and even jailbreaking. But let's start with password protection and potential bypasses, as without the passcode we can hardly extract anything from the modern iOS device. ...