On iOS devices (starting with the iPhone 4), the entire filesystem is encrypted with a filesystem key, which is computed from the device's unique hardware key. This key is stored in effaceable storage, which exists between the OS and hardware levels of the device. This is the reason that Joint Test Action Group (JTAG) and chip-off methods are not useful acquisition methods, as the entire data dump will be encrypted.
Encryption
by Rohit Tamma,
Oleg Skulkin,
Heather Mahalik,
Practical Mobile Forensics - Fourth Edition
- Title Page
- Copyright and Credits
- About Packt
- Contributors
- Preface
- Introduction to Mobile Forensics
- The need for mobile forensics
- Understanding mobile forensics
- Challenges in mobile forensics
- The mobile phone evidence extraction process
- Practical mobile forensic approaches
- Potential evidence stored on mobile phones
- Examination and analysis
- Rules of evidence
- Good forensic practices
- Summary
- Section 1: iOS Forensics
- Understanding the Internals of iOS Devices
- Data Acquisition from iOS Devices
- Data Acquisition from iOS Backups
- iOS Data Analysis and Recovery
- iOS Forensic Tools
- Section 2: Android Forensics
- Understanding Android
- Android Forensic Setup and Pre-Data Extraction Techniques
- Setting up a forensic environment for Android
- Connecting an Android device to a workstation
- Screen lock bypassing techniques
- Using ADB to bypass the screen lock
- Deleting the gesture.key file
- Updating the settings.db file
- Checking for the modified recovery mode and ADB connection
- Flashing a new recovery partition
- Using automated tools
- Using Android Device Manager
- Bypass using Find My Mobile (for Samsung phones only)
- Smudge attack
- Using the forgot password/forgot pattern option
- Bypassing third-party lock screens by booting into safe mode
- Secure USB debugging bypass using ADB keys
- Secure USB debugging bypass in Android 4.4.2
- Crashing the lock screen UI in Android 5.x
- Other techniques
- Gaining root access
- Summary
- Android Data Extraction Techniques
- Android Data Analysis and Recovery
- Android App Analysis, Malware, and Reverse Engineering
- Section 3: Windows Forensics and Third-Party Apps
- Windows Phone Forensics
- Parsing Third-Party Application Files
- Other Books You May Enjoy
Encryption
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.