In macOS Catalina, Apple has done away with iTunes and replaced its many features with standalone programs. On feature used by forensic analysts was the backup function. This blog explores the differences in the forensic backup of an iPhone 6 on macOS Catalina vs Mojave.
This is the third post in a blog series describing how analysts can decrypt iOS 10 and later backups that are encrypted. In this post, we examine the venerable iphone-dataprotection tools developed in 2011 by Jean-Baptiste Bedrune and Jean Sigwald of Sogeti/ESEC.
This is the second post in a blog series describing how analysts can decrypt iOS 10 and later backups that are encrypted. These techniques assume you know the password and do not implement brute force password cracking. The first tool we examine is iRestore by Steve Dunham.
This is the first post in a blog series describing how analysts can decrypt iOS 10 and later backups that are encrypted. These techniques assume you know the password and do not implement brute force password cracking. The first tool we examine is iRestore by Steve Dunham.
© 2021 Hack42, LLC. All Rights Reserved.
