Practical Mobile Forensics - Fourth Edition

Practical logical acquisition with libimobiledevice

Having the theory under your belt is good, but putting this into practice is much better. Let's create a logical image of an iPhone running iOS 13.2 with libimobiledevice, which should already be installed on your workstation, as we used it for device information gathering in the previous chapter.

OK, let's start:

1. First of all, let's make our backups encrypted. Connect the iOS device to your workstation and start the Command Prompt. Change the directory to the one containing libimobiledevice and type in the following command:

idevicebackup2.exe backup encryption on <your_password>

2. If you see Backup encryption has been enabled successfully, then you've done everything right and the backups ...