Practical Mobile Forensics - Fourth Edition

Logical acquisition and analysis with Belkasoft Evidence Center

Since backup processing and analysis is one of the best features of Belkasoft Evidence Center, we are going to walk you through this process here:

1. Let's start by creating a new case:

Creating a new case

2. There are multiple options here – you can process a previously acquired image, such as an iTunes backup, or choose to extract data from a device first. Let's start with logical acquisition. Choose the Mobile option:

Choosing the data source

3. Since we're dealing with an iOS device, ...