Acquisitions
Publisher Summary
This chapter covers various types of forensic acquisitions that can be performed on the iPhone, iPad, and other iOS devices. On the iPhone or iPad, there are three methods of acquiring data: backup acquisition, logical acquisition, and physical acquisition. A logical technique extracts allocated data and is typically achieved by accessing the file system. Allocated data simply means that the data is not deleted and is accessible on the file system. Physical techniques target the physical storage medium directly and these do not rely on the file system itself to access the data. Through a backup acquisition, data that is backed up from the device onto a computer is retrieved. This method is used when the ...
Get iPhone and iOS Forensics now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
