iOS device backups contain essential information that may be your only source of evidence. Information stored in iOS backups includes photos, videos, contacts, emails, call logs, user accounts and passwords, applications, and device settings. This chapter explained how to create backup files and retrieve data from iTunes and iCloud backups, including encrypted backup files, wherever possible.

The following chapter, Chapter 5, iOS Data Analysis and Recovery, goes further into the forensic investigation by showing you how to analyze the data recovered from the backup files.