April 2020
Intermediate to advanced
400 pages
10h 12m
English
As we mentioned previously, Physical Analyzer can be used not only for parsing different types of forensic artifacts from acquired images but also for performing both logical and filesystem (and even physical, for older devices) types of extraction from iOS devices. Due to the fact that physical acquisition is actually only for older devices, the best option is an advanced logical acquisition.
We are going to acquire and analyze data from an iPhone running iOS 13.2.3. Let's get started: