imaging

Forensic iOS backups in macOS Catalina

In macOS Catalina, Apple has done away with iTunes and replaced its many features with standalone programs. On feature used by forensic analysts was the backup function. This blog explores the differences in the forensic backup of an iPhone 6 on macOS Catalina vs Mojave.

Continue reading

Android Forensics Techniques - Introduction

This section of my Android Forensic Techniques chapter provides an introduction to the different types of forensics investigations, the differences between logical and physical techniques and some thoughts on a key challenge in mobile forensics - imaging without modifying the device.

Continue reading

Android Forensics Techniques - Procedures

This section of my Android Forensics Techniques chapter covers the procedures for handling an Android device including pass code procedures, network isolation, power issues and how techniques to circumvent the pass code.

Continue reading