Files

PDF

HOW TO CITE

Forensic Investigation: Apple Devices Acquisition & Analysis
Authors: Parag Shukla,Aditya Pratap
Affiliation: School of Cyber Security and Digital Forensics, National Forensic Sciences University,Digital Forensics & Information Security, School of Cyber Security and Digital Forensics, National Forensic Sciences University
Abstract:

In the field of forensic investigation, Apple devices have always been of great interest. As a result of the device's security features, its architecture as well as its new hardware and software features, investigators have been unable to do much with it. There is limited exposure of Apple devices to investigators since they are more familiar with Android & Windows devices. As part of this research paper, we will present a brief overview of iOS and Mac devices. Understanding the Internal Filesystem, Application Data Storage, Boot Modes & what are the new Security features that even encrypt that data stored within the eMMC. We’ll also look into what are the different acquisition and analysis methods available for Apple devices which can be performed via Open-Source tools. 

Keywords: Acquisition,Apple Devices,Jailbreak,iOS,Mac,forensic investigation
Vol & Issue: VOL.1, ISSUE No.1, December 2022