As we mentioned previously, Physical Analyzer can be used not only for parsing different types of forensic artifacts from acquired images but also for performing both logical and filesystem (and even physical, for older devices) types of extraction from iOS devices. Due to the fact that physical acquisition is actually only for older devices, the best option is an advanced logical acquisition.
We are going to acquire and analyze data from an iPhone running iOS 13.2.3. Let's get started:
- Connect the device through the appropriate cable to your workstation. Make sure it's trusted and launch the Physical Analyzer.
- Go to Extract | iOS Device Extraction. The ...