iOS Forensics Cookbook
By Birani Bhanu and Birani Mayank
()
About this ebook
About This Book
- This book gets you straight into solving even the most complex iOS forensic problems with easy-to-understand recipes
- Get to grips with extraction and analysis techniques to perform forensic investigations on iOS devices
- Gain insights into how to protect your data and perform data recovery from iOS-based devices
Who This Book Is For
If you are an iOS application developer who wants to learn about a test flight, hockey app integration, and recovery tools, then this book is for you. This book will be helpful for students learning forensics, as well as experienced iOS developers.
What You Will Learn
- Discover the various ways to save data in the document directory of the device
- Get to grips with encrypting and decrypting of files saved in the document directories
- Explore ways to integrate social media with iOS applications
- Grab the user events and actions on the iOS application using analytic tools
- Analyze useful information from the data gathered in the cloud
- Grasp numerous concepts associated with air application distribution
- Track errors in an application effectively to document them for forensic analysis
- Read crash reports accumulated on iTunesConnect and decode them to generate and gather useful information
In Detail
Mobile device forensics is a branch of digital forensics that involves the recovery of evidence or data in a digital format from a device without affecting its integrity. With the growing popularity of iOS-based Apple devices, iOS forensics has developed immense importance.
To cater to the need, this book deals with tasks such as the encryption and decryption of files, various ways to integrate techniques with social media, and ways to grab the user events and actions on the iOS app. Using practical examples, we’ll start with the analysis keychain and raw disk decryption, social media integration, and getting accustomed to analytics tools. You’ll also learn how to distribute the iOS apps without releasing them to Apple’s App Store. Moving on, the book covers test flights and hockey app integration, the crash reporting system, recovery tools, and their features. By the end of the book, using the aforementioned techniques, you will be able to successfully analyze iOS-based devices forensically.
Style and approach
This book takes a step-by-step recipe-based approach to iOS forensics and investigation techniques. Topics are explained sequentially in order of complexity, and are accompanied by code and theory that is easy to grasp.
Read more from Birani Bhanu
Getting Started with Flurry Analytics Rating: 0 out of 5 stars0 ratingsiOS Game Programming Cookbook Rating: 0 out of 5 stars0 ratings
Related to iOS Forensics Cookbook
Related ebooks
Learning iOS Security Rating: 0 out of 5 stars0 ratingsHands-On Web Penetration Testing with Metasploit: The subtle art of using Metasploit 5.0 for web application exploitation Rating: 0 out of 5 stars0 ratingsiOS Hacker's Handbook Rating: 0 out of 5 stars0 ratingsInstant Java Password and Authentication Security Rating: 0 out of 5 stars0 ratingsKali Linux Wireless Penetration Testing: Beginner's Guide Rating: 0 out of 5 stars0 ratingsMobile Forensics – Advanced Investigative Strategies Rating: 0 out of 5 stars0 ratingsWireless Hacking 101 Rating: 5 out of 5 stars5/5Learning iOS Penetration Testing Rating: 0 out of 5 stars0 ratingsHands-On Network Forensics: Investigate network attacks and find evidence using common network forensic tools Rating: 0 out of 5 stars0 ratingsAndroid Application Security Essentials Rating: 0 out of 5 stars0 ratingsLearning Android Forensics Rating: 4 out of 5 stars4/5The Survival Guide to Maintaining Access and Evading Detection Post-Exploitation Rating: 0 out of 5 stars0 ratingsPractical Mobile Forensics Rating: 4 out of 5 stars4/5Instant Apple Configurator How-to Rating: 0 out of 5 stars0 ratingsHacking Multifactor Authentication Rating: 0 out of 5 stars0 ratingsMobile Device Forensics A Complete Guide - 2020 Edition Rating: 0 out of 5 stars0 ratingsKali Linux CTF Blueprints Rating: 0 out of 5 stars0 ratingsKali Linux Intrusion and Exploitation Cookbook Rating: 5 out of 5 stars5/5Ethical Hacking 101 - How to conduct professional pentestings in 21 days or less!: How to hack, #1 Rating: 5 out of 5 stars5/5Metasploit Bootcamp Rating: 5 out of 5 stars5/5Android Hacker's Handbook Rating: 4 out of 5 stars4/5Gray Hat Hacking the Ethical Hacker's Rating: 5 out of 5 stars5/5Android Security Cookbook Rating: 0 out of 5 stars0 ratingsUltimate Hacking Challenge: Hacking the Planet, #3 Rating: 5 out of 5 stars5/5Burp Suite Essentials Rating: 4 out of 5 stars4/5Learning Network Forensics Rating: 5 out of 5 stars5/5Mobile Security: How to secure, privatize and recover your devices Rating: 5 out of 5 stars5/5OSINT 101 Handbook: Expert-Level Intelligence Gathering: Advanced Reconnaissance, Threat Assessment, And Counterintelligence Rating: 0 out of 5 stars0 ratings
Security For You
NIST Cybersecurity Framework: A pocket guide Rating: 0 out of 5 stars0 ratingsCybersecurity: The Beginner's Guide: A comprehensive guide to getting started in cybersecurity Rating: 5 out of 5 stars5/5Cybersecurity For Dummies Rating: 5 out of 5 stars5/5Social Engineering: The Science of Human Hacking Rating: 3 out of 5 stars3/5ISO 27001 Controls – A guide to implementing and auditing Rating: 5 out of 5 stars5/5IAPP CIPM Certified Information Privacy Manager Study Guide Rating: 0 out of 5 stars0 ratingsDark Territory: The Secret History of Cyber War Rating: 4 out of 5 stars4/5How to Become Anonymous, Secure and Free Online Rating: 5 out of 5 stars5/5CompTIA Security+ Study Guide with over 500 Practice Test Questions: Exam SY0-701 Rating: 5 out of 5 stars5/5Codes and Ciphers Rating: 5 out of 5 stars5/5Tor and the Dark Art of Anonymity Rating: 5 out of 5 stars5/5Hacking For Dummies Rating: 4 out of 5 stars4/5Unmasking the Social Engineer: The Human Element of Security Rating: 5 out of 5 stars5/5Mastering Blockchain Rating: 5 out of 5 stars5/5The DIY Guide to Home Wi-Fi Rating: 0 out of 5 stars0 ratingsISO/IEC 27001:2022: An introduction to information security and the ISMS standard Rating: 5 out of 5 stars5/5Mr. Robot and Philosophy: Beyond Good and Evil Corp Rating: 0 out of 5 stars0 ratingsThe Art of Intrusion: The Real Stories Behind the Exploits of Hackers, Intruders and Deceivers Rating: 4 out of 5 stars4/5IAPP CIPP / US Certified Information Privacy Professional Study Guide Rating: 0 out of 5 stars0 ratingsGoogle Cloud Platform an Architect's Guide Rating: 5 out of 5 stars5/5The Wires of War: Technology and the Global Struggle for Power Rating: 5 out of 5 stars5/5ISO27001/ISO27002:2013: A Pocket Guide Rating: 4 out of 5 stars4/5Cypherpunks: Freedom and the Future of the Internet Rating: 4 out of 5 stars4/5
Reviews for iOS Forensics Cookbook
0 ratings0 reviews
Book preview
iOS Forensics Cookbook - Birani Bhanu
Table of Contents
iOS Forensics Cookbook
Credits
About the Authors
www.PacktPub.com
Support files, eBooks, discount offers, and more
Why Subscribe?
Free Access for Packt account holders
Preface
What this book covers
What you need for this book
Who this book is for
Sections
Getting ready
How to do it…
How it works…
There's more…
See also
Conventions
Reader feedback
Customer support
Downloading the example code
Errata
Piracy
Questions
1. Saving and Extracting Data
The Documents directory
Getting ready
How to do it...
See also
Saving data using the RAW file
Getting ready
How to do it...
Saving data in the SQLite database
Getting ready
How to do it...
Learning about core data
Getting ready
How to do it...
2. Social Media Integration
Integration with Facebook
Getting ready
How to do it...
Integrating with LinkedIn
Getting ready
How to do it...
Integration with Instagram
Getting ready
How to do it...
3. Integrating Data Analytics
Introduction
Google Analytics
Getting ready
How to do it...
Flurry Analytics
Getting ready
How to do it...
Flurry with data mining
Getting ready
How to do it…
Integrating Mixpanel
Getting ready
How to do it…
4. App Distribution and Crash Reporting
Setting up and integrating TestFlight
Getting ready
How to do it...
Integrating HockeyApp
Getting ready
How to do it...
HockeyApp for crash reporting
Getting ready
How to do it...
5. Demystifying Crash Reports
Crashlytics integration
Getting ready
How to do it...
Desymbolication of crash logs
Receiving crash logs directly from a device without using Xcode
Getting ready
How to do it...
Receiving crash logs from a device by using Xcode
How to do it...
Analyzing crash reports
Getting ready
How to do it...
6. Forensics Recovery
DFU and Recovery modes
How to do it...
How to do it...
Extracting and reading data
Getting ready
How to do it...
See more...
Recovering backups
How to do it...
See more...
Extracting data from iTunes backups
How to do it...
Encrypting and decrypting tools
How to do it...
See more...
7. Forensics Tools
Exploring iPhone Backup Analyzer
Getting ready
How to do it...
Exploring iExplorer
How to do it...
Exploring SQLite browser
Getting ready
How to do it...
Jailbreaking iPhone devices
Getting ready
How to do it...
Index
iOS Forensics Cookbook
iOS Forensics Cookbook
Copyright © 2016 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.
First published: January 2016
Production reference: 1220116
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham B3 2PB, UK.
ISBN 978-1-78398-846-4
www.packtpub.com
Credits
Authors
Bhanu Birani
Mayank Birani
Reviewer
Dr. Aswami Ariffin
Commissioning Editor
Julian Ursell
Acquisition Editors
Vivek Anantharaman
Chaitanya Nair
Content Development Editor
Siddhesh Salvi
Technical Editor
Menza Mathew
Copy Editor
Merilyn Pereira
Project Coordinator
Nidhi Joshi
Proofreader
Safis Editing
Indexer
Tejal Daruwale Soni
Production Coordinator
Melwyn Dsa
Cover Work
Melwyn Dsa
About the Authors
Bhanu Birani has more than 7 years of experience in the software industry. He is passionate about architecting, designing, and developing complicated applications. He specializes in creating web, backend as a service, and mobile products suitable for B2B and B2C context. He has expertise in end to end development to create innovative and engaging applications for mobile devices.
After years of programming experience in different programming languages, he started developing applications for iOS devices. He started software development around the same time as his graduation and was really interested in learning about the new technologies emerging in the market. He then joined a game development company. After contributing to the gaming domain, he started working on content-based applications and radio applications. He also contributed to hyperlocal geo-targeting using BLE (iBeacons). Over the years, he has gained experience in all phases of software development as requirement gathering, feasibility analysis, architecture design, coding and debugging, quality improvement, deployment, and maintenance.
Mayank Birani has more than 4 years of experience in the software industry. He was a star from the beginning of his career, and he worked with many start-ups. Soon after graduation, he started working on iOS/Mac technologies and is an R&D engineer for Apple Inc. India. He has an inherent passion for coding and developing applications to make the world a better place. He has contributed actively to many start-ups with revolutionary ideas.
In the early stages of his career, he was the sole author of Learning iOS 8 for Enterprise by Packt Publishing.
www.PacktPub.com
Support files, eBooks, discount offers, and more
For support files and downloads related to your book, please visit www.PacktPub.com.
Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at
At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.
https://www2.packtpub.com/books/subscription/packtlib
Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can search, access, and read Packt's entire library of books.
Why Subscribe?
Fully searchable across every book published by Packt
Copy and paste, print, and bookmark content
On demand and accessible via a web browser
Free Access for Packt account holders
If you have an account with Packt at www.PacktPub.com, you can use this to access PacktLib today and view nine entirely free books. Simply use your login credentials for immediate access.
Preface
This book focuses on the various techniques for acquisition, identification, and forensic analysis of iOS devices. This is a step-by-step practical guide that will help you to follow the procedure and extract data from iOS devices. This book helps professionals to investigate and understand forensic scenarios easily. This is a practical guide written after the rising popularity of iOS devices and the growing investigation requirements. This book deals with the various ways to investigate devices with different iOS versions and the presence and absence of other security systems such as lock code, backup passwords, and so on.
Conceptually, this book can be divided into three sections. The first section deals with the understanding of how data is generated by applications and how and where it is stored on the device. The second section focuses mainly on various analytic techniques, which include the analytics of apps by reading their logs and reports provided by Apple and other third-party vendors. This also includes the analysis and other related data mining studies provided by Google and Crashlytics. The third section, that is, the last section of the book, deals with a study, in detail, of various core forensics, which include the data structure and organization of files. This also includes the study of various open source tools that allow the detail decrypting techniques performed on any iOS device.
What this book covers
Chapter 1, Saving and Extracting Data, focuses on the ways to save the data in the document directory of the device along with ways to fetch the data back. In this chapter, we will also discuss the encryption and decryption of the files that are saved in the document directories. We will also discuss keychain and raw disk decryption in the chapter.
Chapter 2, Social Media Integration, teaches