Mission impossible? Not really (currently)!Ĭheckra1n: the turning point of iOS forensics Obviously there are much more data stored in the iPhone that can be accessed only with a more deeper acquisition process.īefore First Unlock (BFU) is the worst case that a forensic analyst may face off: the iDevice is turned off, and once booted it will ask for the unlock code.
Ok, logical acquisition is easy, safe and it always works: however, this kind of acquisition mostly gives you the same data you can get via iTunes: a simple backup (sometimes encrypted), media files and some logs.
IOS forensic is quite complex: in many cases, jailbreaking is the only way to gather all most information available in iOS devices.
0 kommentar(er)
