Section 1: iOS Forensics

This section will provide you with an overview of iOS devices such as iPhones and iPads, as well as an overview of the operating systems and filesystems they run. You will learn about the different types of forensic acquisition methods, including logical acquisition and filesystem acquisition, the process of jailbreaking, performing forensic analysis on the most common artifact sources, and how to work with popular mobile forensic software.

This section will consist of the following chapters:

• Chapter 2, Understanding the Internals of iOS Devices
• Chapter 3, Data Acquisition from iOS Devices
• Chapter 4, Data Acquisition from iOS Backups
• Chapter 5, iOS Data Analysis and Recovery
• Chapter 6, iOS Forensic Tools