Tools to analyze common file and data types
There are several file types and pieces of data that cannot be viewed using standard applications. The following lists out many of the common file and data types recovered from an iPhone as well as what applications can be used to view these files:
• Property Lists (plists): Any text editor can be used to view a plist. Plutil can be used to convert from binary to XML (http://scw.us/iPhone/plutil/)
• SQLite database: SQLite Database Browser (http://sqlitebrowser.sourceforge.net/)
• Unix Epoch Timestamps: Epoch Converter Website (http://www.epochconverter.com/)
• Mac OS X Epoch Timestamps: CFAbsoluteTimeConverter (http://www.macupdate.com/app/mac/37446/cfabsolutetimeconverter)
• Disk Image File ...
Get iPhone and iOS Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
