Search icon
Subscription
0
Cart icon
Close icon
You have no products in your basket yet
Arrow left icon
All Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Newsletters
Free Learning
Arrow right icon
Python Digital Forensics Cookbook

You're reading from  Python Digital Forensics Cookbook

Product type Book
Published in Sep 2017
Publisher Packt
ISBN-13 9781783987467
Pages 412 pages
Edition 1st Edition
Languages
Concepts
Authors (2):
Chapin Bryce Chapin Bryce
Profile icon Chapin Bryce
Preston Miller Preston Miller
Profile icon Preston Miller
View More author details

Table of Contents (11) Chapters

Preface 1. Essential Scripting and File Information Recipes 2. Creating Artifact Report Recipes 3. A Deep Dive into Mobile Forensic Recipes 4. Extracting Embedded Metadata Recipes 5. Networking and Indicators of Compromise Recipes 6. Reading Emails and Taking Names Recipes 7. Log-Based Artifact Recipes 8. Working with Forensic Evidence Container Recipes 9. Exploring Windows Forensic Artifacts Recipes - Part I 10. Exploring Windows Forensic Artifacts Recipes - Part II

Processing iTunes backups

Recipe Difficulty: Easy

Python Version: 2.7 or 3.5

Operating System: Any

In this recipe, we will convert unencrypted iTunes backups into a human-readable format, allowing us to easily explore its contents without any third-party tools. Backups can be found in the MobileSync\Backup folder on the host computer.

For details on default iTunes backup locations for Windows and OS X, visit https://support.apple.com/en-us/HT204215.

If an Apple product has been backed up to the machine, there will be a number of folders whose name is a GUID representing a specific device within the backup folder. These folders contain differential backups for each device over a period of time.

With the new backup format introduced in iOS 10, files are stored in subfolders containing the first two hexadecimal characters of the file name. Each file's name is a SHA-1 hash of...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $15.99/month. Cancel anytime}