Preface
[ 2 ]
Chapter 3, Evidence Acquisition from iDevices, explains how to acquire data from iOS devices
with respect to their model and iOS version, which was introduced in the previous chapter.
Physical, logical, and advanced logical acquisitions are discussed, along with the most
useful techniques on how to crack or bypass the passcode set by the user. This chapter
presents examples of acquisitions realized with various tools, with latest techniques for iOS
8 and iOS 9.
Chapter 4, Evidence Acquisition and Analysis from iTunes Backup, gives an overview of how to
deal with the analysis of an iTunes backup taken from a PC or a Mac, focusing on how to
read its content and how to try to attack a protected password set by the user. This chapter
also explains how to recover passwords stored in the device when the backup is not
protected by a password of its own or when the analyst is able to crack it.
Chapter 5, Evidence Acquisition and Analysis from iCloud, deals with the case in which the
owner is using iCloud to store the device's backup. You will learn how to recover the
credentials or the authorization token used to retrieve the information stored in Apple
servers.
Chapter 6, Analyzing iOS Devices, provides a complete set of information regarding how to
analyze data stored in the acquired device. Both preinstalled (such as address book, call
history, SMS, MMS, and Safari) and third-party applications (such as chat, social network,
and cloud storage) are explained, with particular attention to the core artifacts and how to
search and recover them.
Chapter 7, Applications and Malware Analysis, is an introduction to the core concepts and
tools used to perform an application assessment from a security point of view. You will also
learn how to deal with mobile malware that may be present on jailbroken devices.
Appendix A, References, is a complete set of references that will help you understand some
core concepts explained in the book so that you can go deeper into specific topics.
Appendix B, Tools for iOS Forensics, is a comprehensive collection of open source, freeware,
and commercial tools used to acquire and analyze the content of iOS devices.
Appendix C, Self-test Answers, contains the answers to the questions asked in the chapters of
the book.
剩余322页未读，继续阅读
