Search icon
Subscription
0
Cart icon
Close icon
You have no products in your basket yet
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Mobile Forensics Cookbook

You're reading from  Mobile Forensics Cookbook

Product type Book
Published in Dec 2017
Publisher
ISBN-13 9781785282058
Pages 302 pages
Edition 1st Edition
Languages
Concepts
Author (1):
Igor Mikhaylov Igor Mikhaylov
Profile icon Igor Mikhaylov

Table of Contents (18) Chapters

Title Page
Credits
About the Author
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface
1. SIM Card Acquisition and Analysis 2. Android Device Acquisition 3. Apple Device Acquisition 4. Windows Phone and BlackBerry Acquisition 5. Clouds are Alternative Data Sources 6. SQLite Forensics 7. Understanding Plist Forensics 8. Analyzing Physical Dumps and Backups of Android Devices 9. iOS Forensics 10. Windows Phone and BlackBerry Forensics 11. JTAG and Chip-off Techniques

iOS backup parsing with Belkasoft Evidence Center


The Belkasoft Evidence Center program has already been described in Chapter 6, SQLite Forensics. In this recipe, we will describe how to analyze an iTunes backup via Belkasoft Evidence Center.

How to do it…

  1. Start the Belkasoft Evidence Center program. Click the New Case button. Specify the information about the new case, such as the name of the case, the path, where the data of the case will be located, the name of the investigator, a description of the case, and the time zone. Click on the Create and open button:

The window of a new case setting

  1. In the next window, specify the path to the iTunes backup that was extracted earlier. Select the Manifest.plist file. Click the Open button and then the Next button:

Selection window of data source

  1. Specify the types of data (chats, email messages images, videos, calls, SMS messages, and so on) that you need to extract. Click the Finish button. The more types of data specified for extraction, the longer...
lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}