Free Sample
+ Collection

Practical Mobile Forensics

Beginner's Guide
Satish Bommisetty, Rohit Tamma, Heather Mahalik

Dive into mobile forensics on iOS, Android, Windows, and BlackBerry devices with this action-packed, practical guide
$35.99
$59.99
RRP $35.99
RRP $59.99
eBook
Print + eBook

Want this title & more?

$16.99 p/month

Subscribe to PacktLib

Enjoy full and instant access to over 2000 books and videos – you’ll find everything you need to stay ahead of the curve and make sure you can always get the job done.

Book Details

ISBN 139781783288311
Paperback328 pages

About This Book

  • Clear and concise explanations for forensic examinations of mobile devices
  • Master the art of extracting data, recovering deleted data, bypassing screen locks, and much more
  • The first and only guide covering practical mobile forensics on multiple platforms

Who This Book Is For

If you are a budding forensic analyst, consultant, engineer, or a forensic professional wanting to expand your skillset, this is the book for you. The book will also be beneficial to those with an interest in mobile forensics or wanting to find data lost on mobile devices. It will be helpful to be familiar with forensics in general but no prior experience is required to follow this book.

Table of Contents

Chapter 1: Introduction to Mobile Forensics
Mobile forensics
Mobile phone evidence extraction process
Practical mobile forensic approaches
Potential evidence stored on mobile phones
Rules of evidence
Good forensic practices
Summary
Chapter 2: Understanding the Internals of iOS Devices
iPhone models
iPhone hardware
iPad models
iPad hardware
File system
The HFS Plus file system
Disk layout
iPhone operating system
Summary
Chapter 3: Data Acquisition from iOS Devices
Operating modes of iOS devices
Physical acquisition
Acquisition via a custom ramdisk
Acquisition via jailbreaking
Summary
Chapter 4: Data Acquisition from iOS Backups
iTunes backup
iCloud backup
Summary
Chapter 5: iOS Data Analysis and Recovery
Timestamps
SQLite databases
Property lists
Other important files
Recovering deleted SQLite records
Summary
Chapter 6: iOS Forensic Tools
Elcomsoft iOS Forensic Toolkit
Oxygen Forensic Suite 2014
Cellebrite UFED Physical Analyzer
Paraben iRecovery Stick
Open source or free methods
Summary
Chapter 7: Understanding Android
The Android model
Android security
Android file hierarchy
Android file system
Summary
Chapter 8: Android Forensic Setup and Pre Data Extraction Techniques
A forensic environment setup
Screen lock bypassing techniques
Gaining root access
Summary
Chapter 9: Android Data Extraction Techniques
Imaging an Android Phone
Data extraction techniques
Summary
Chapter 10: Android Data Recovery Techniques
Data recovery
Summary
Chapter 11: Android App Analysis and Overview of Forensic Tools
Android app analysis
Reverse engineering Android apps
Forensic tools overview
Cellebrite – UFED
MOBILedit
Autopsy
Summary
Chapter 12: Windows Phone Forensics
Windows Phone OS
Windows Phone file system
Data acquisition
Summary
Chapter 13: BlackBerry Forensics
BlackBerry OS
Data acquisition
BlackBerry analysis
Summary

What You Will Learn

  • Learn different approaches to practical mobile forensics
  • Understand the architecture and security mechanisms present in iOS and Android platforms
  • Identify sensitive files on iOS and Android platforms
  • Set up the forensic environment
  • Extract data on iOS and Android platforms
  • Recover data on iOS and Android platforms
  • Understand the forensics of Windows and BlackBerry devices

In Detail

With the advent of smartphones, the usage and functionality of mobile devices has grown enormously along with the sensitive information contained in these devices. Law enforcement agencies around the world have realized the importance of evidence present on a mobile device and how it can influence the outcome of an investigation.

Practical Mobile Forensics explains mobile forensic techniques on the iOS, Android, Windows, and BlackBerry platforms. You will learn the fundamentals of mobile forensics, and different techniques to extract data from a device, recover deleted data, bypass the screen lock mechanisms, and various other tools that aid in a forensic examination.

This book will teach you everything you need to know to forensically examine a mobile device. The techniques described are not only useful for budding forensic investigators, but will also come in handy for those who may want to recover accidentally deleted data.

Authors

Read More

Recommended for You