You're reading from Mobile Forensics Cookbook Data acquisition, extraction, recovery techniques, and investigations using modern forensic tools

Product type Paperback

Published in Dec 2017

Publisher

ISBN-13 9781785282058

Length 302 pages

Edition 1st Edition

Tools

Oxygen Forensics

Concepts

Forensics

Author (1):

Igor Mikhaylov

View More author details

Table of Contents (12) Chapters

Preface

1. SIM Card Acquisition and Analysis FREE CHAPTER

2. Android Device Acquisition

3. Apple Device Acquisition

4. Windows Phone and BlackBerry Acquisition

5. Clouds are Alternative Data Sources

6. SQLite Forensics

7. Understanding Plist Forensics

8. Analyzing Physical Dumps and Backups of Android Devices

9. iOS Forensics

10. Windows Phone and BlackBerry Forensics

11. JTAG and Chip-off Techniques

Introduction

SQLite databases are widely used for different applications' data storage on both mobile devices and PCs. That is why analysis of such databases is highly important. According to our experience, in-depth analysis of SQLite databases allows us to extract up to 50% of additional data. This is explained in the following points:

There are millions of applications that store their data in SQLite databases. None of the mobile forensic software developers are able to provide the support for the analysis of such a large number of applications.
In the case of the name of the database or the path, where it is stored changes during the process of application version changing. Mobile forensic tools will not be able to recognize and analyze the database correctly.
Not all forensic tools have an option for the automatic analysis of SQLite databases. For example, some tools...

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at $19.99/month. Cancel anytime

Authors (1)

Mikhaylov

Igor Mikhaylov has been working as a forensics expert for 21 years. During this time, he had attended a lot of seminars and training classes in top forensic companies (such as Guidance Software, AccessData, and Cellebrite) and forensic departments of government organizations in the Russian Federation. He has experience and skills in computer forensics, incident response, cellphones forensics, chip-off forensics, malware forensics, data recovery, digital images analysis, video forensics, big data, and other fields. He has worked on several thousand forensic cases. When he works on a forensic case, he examines evidence using in-depth, industry-leading tools and techniques. He uses forensic software and hardware from leaders in the forensics industry. He has written three tutorials on cellphone forensics and incident response for Russian-speaking forensics experts. He is the reviewer of Windows Forensics Cookbook by Oleg Skulkin and Scar de Courcier, Packt Publishing.

See other products by Mikhaylov