Summary

In this chapter, we learned about connectivity data and how iOS devices communicate through cellular, Wi-Fi, and Bluetooth technologies.

First, we introduced cellular forensics and learned how to extract cellular-related data from an iOS extraction, such as the device's IMSI and IMEI codes. Then, we analyzed the PowerLog to view the relevant events, such as the device registering with the cellular network.

After that, we focused on phone calls and learned how to extract contact data from the address book, as well as how to access the call log, which contains details of all incoming and outgoing communications, including FaceTime videocalls. Then, we introduced the topic of network usage and learned which queries allow an investigator to see which processes were running on a device, as well as how much networking data they were consuming.

Finally, we learned about Safari forensics. We took an in-depth look at where common Safari artifacts are located and how to...