Investigate, analyze, and report iOS, Android, and Windows devices
Key Features
- Get hands-on experience in performing simple to complex mobile forensics techniques
- Retrieve and analyze data stored not only on mobile devices but also through the cloud and other connected mediums
- A practical guide to leveraging the power of mobile forensics on popular mobile platforms with lots of tips, tricks, and caveats
Book Description
Covering up-to-date mobile platforms, this book focuses on teaching you the most recent techniques for investigating mobile devices. We delve into mobile forensics techniques for iOS 9-11 and Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations.
By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.
What you will learn
- Discover new techniques in practical mobile forensics
- Understand the architecture and security mechanisms present in iOS and Android platforms
- Identify sensitive files on iOS and Android platforms
- Set up a forensic environment
- Extract data from iOS and Android platforms
- Recover data on iOS and Android platforms
- Understand the forensics of Windows devices
- Explore various third-party application techniques and data recovery techniques
Who this book is for
If you are a forensics professional and are eager to widen your forensics skill set to mobile forensics then, this book is for you. Some understanding of digital forensics practices would be helpful.
Table of Contents
- Introduction to Mobile Forensics
- Understanding the Internals of iOS Devices
- Data Acquisition from iOS Devices
- Data Acquisition from iOS Backups
- iOS Data Analysis and Recovery
- iOS Forensic Tools
- Understanding Android
- Android Forensic Setup and Pre-Data Extraction Techniques
- Android Data Extraction Techniques
- Android Data Analysis and Recovery
- Android App Analysis, Malware, and Reverse Engineering
- Windows Phone Forensics
- Parsing Third-Party Application Files
Rohit Tamma is a senior program manager currently working with Microsoft. With over 10 years of experience in the field of security, his background spans management and technical consulting roles in the areas of application and cloud security, mobile security, penetration testing, and secure coding. Rohit has also co-authored Learning Android Forensics, from Packt, which explain various ways to perform forensics on mobile platforms. You can contact him on Twitter at @RohitTamma.
Oleg Skulkin is the Head of Digital Forensics and Malware Analysis Laboratory at Group-IB. Oleg has worked in the fields of digital forensics, incident response, and cyber threat intelligence and research for over a decade, fueling his passion for uncovering new techniques used by hidden adversaries. Oleg has authored and co-authored multiple blog posts, papers, and books on related topics and holds GCFA and GCTI certifications.
Heather Mahalik is the senior director of digital intelligence at Cellebrite. She is a senior instructor and author for the SANS Institute, and she is also the course lead for the FOR585 Smartphone Forensic Analysis In-Depth course. With 18 years of experience in digital forensics, she continues to thrive on smartphone investigations, digital forensics, forensic course development and instruction, and research on application analysis and smartphone forensics.
