Information Technology Reference
In-Depth Information
Chapter 6. iOS Forensic Tools
Although understanding acquisition methods and techniques is helpful, a forensic examiner
often needs the help of tools to accomplish tasks in the given time. Forensic tools not only
save time but also make the process a lot easier. Currently, there are many commercial
tools such as Elcomsoft iOS Forensic Toolkit, Cellebrite UFED, BlackLight, Oxygen
Forensic Suite, AccessData MPE+, iXAM, Lantern, XRY, SecureView, Paraben iRecovery
Stick, and so on, which are available for forensic acquisition and analysis of an iOS device.
For familiarity purposes, this chapter will walk you through the usage of a few commercial
and open source tools and provide details of the steps required to perform acquisitions of
iOS devices.
