Practical Mobile Forensics - Third Edition

Investigate, analyze, and report iOS, Android, and Windows devices About This Book • Get hands-on experience in performing simple to complex mobile forensics techniques. • Retrieve and analyze data stored not only on mobile devices but also through the cloud and other connected mediums. • A practical guide to leveraging the power of mobile forensics on popular mobile platforms with lots of tips, tricks, and caveats. Who This Book Is For If you are a forensics professional and are eager to widen your forensics skill set to mobile forensics then, this book is for you. Some understanding of digital forensics practices would do wonders. What You Will Learn • Discover the new techniques in practical mobile forensics • Understand the architecture and security mechanisms present in iOS and Android platforms • Identify sensitive files on the iOS and Android platforms • Set up a forensic environment • Extract data from the iOS and Android platforms • Recover data on the iOS and Android platforms • Understand the forensics of Windows devices • Explore various third-party application techniques and data recovery techniques In Detail Covering up-to-date mobile platforms, this book will focuses on teaching you the most recent techniques for investigating mobile devices. We delve mobile forensics techniques in iOS 9-11, Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations. By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions. Style and approach This book takes a very practical approach and depicts real-life mobile forensics scenarios with lots of tips and tricks to help you acquire the required forensics skillset for various mobile platforms.

Table of Contents:
Table of Contents Introduction to Mobile Forensics Understanding the Internals of iOS Devices Data Acquisition from iOS Devices Data Acquisition from iOS Backups iOS Data Analysis and Recovery iOS Forensic Tools Understanding Android Android Forensic Setup and Pre-Data Extraction Techniques Android Data Extraction Techniques Android Data Analysis and Recovery Android App Analysis, Malware, and Reverse Engineering Windows Phone Forensics Parsing Third-Party Application Files

About the Author :
Rohit Tamma is a security program manager currently working with Microsoft. With over 8 years of experience in the field of security, his background spans management and technical consulting roles in the areas of application and cloud security, mobile security, penetration testing, and security training. Rohit has also coauthored couple of books, such as Practical Mobile Forensics and Learning Android Forensics, which explain various ways to perform forensics on the mobile platforms. You can contact him on Twitter at @RohitTamma. Oleg Skulkin is a digital forensics ""enthusional"" (enthusiast and professional) from Russia with more than 6 years of experience, and is currently employed by Group-IB, one of the global leaders in preventing and investigating high-tech crimes and online fraud. He holds a number of certifications, including GCFA, MCFE, and ACE. Oleg is a coauthor of Windows Forensics Cookbook, and you can find his articles about different aspects of digital forensics both in Russian and foreign magazines. Finally, he is a very active blogger, and he updates the Cyber Forensicator blog daily. Heather Mahalik is the director of forensic engineering with ManTech CARD, where she leads the forensic effort focusing on mobile and digital exploitation. She is a senior instructor and author for the SANS Institute, and she is also the course leader for the FOR585 Advanced Smartphone Forensics course. With over 15 years of experience in digital forensics, she continues to thrive on smartphone investigations, digital forensics, forensic course development and instruction, and research on application analysis and smartphone forensics. Satish Bommisetty is a security analyst working for a Fortune 500 company. His primary areas of interest include iOS forensics, iOS application security, and web application security. He has presented at international conferences, such as ClubHACK and C0C0n. He is also one of the core members of the Hyderabad OWASP chapter. He has identified and disclosed vulnerabilities within the websites of Google, Facebook, Yandex, PayPal, Yahoo!, AT&T, and more, and they are listed in their hall of fame.