Practical Mobile Forensics - Third Edition: A hands-on guide to mastering mobile forensics for the iOS, Android, and the Windows Phone platforms - Softcover

Reseña del editor

Investigate, analyze, and report iOS, Android, and Windows devices

Key Features

• Get hands-on experience in performing simple to complex mobile forensics techniques
• Retrieve and analyze data stored not only on mobile devices but also through the cloud and other connected mediums
• A practical guide to leveraging the power of mobile forensics on popular mobile platforms with lots of tips, tricks, and caveats

Book Description

Covering up-to-date mobile platforms, this book focuses on teaching you the most recent techniques for investigating mobile devices. We delve into mobile forensics techniques for iOS 9-11 and Android 7-8 devices, and Windows 10. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from the cloud, and document and prepare reports of your investigations.

By the end of this book, you will have mastered the current operating systems and the relevant techniques to recover data from mobile devices by leveraging open source solutions.

What you will learn

• Discover new techniques in practical mobile forensics
• Understand the architecture and security mechanisms present in iOS and Android platforms
• Identify sensitive files on iOS and Android platforms
• Set up a forensic environment
• Extract data from iOS and Android platforms
• Recover data on iOS and Android platforms
• Understand the forensics of Windows devices
• Explore various third-party application techniques and data recovery techniques

Who this book is for

If you are a forensics professional and are eager to widen your forensics skill set to mobile forensics then, this book is for you. Some understanding of digital forensics practices would be helpful.

Table of Contents

1. Introduction to Mobile Forensics
2. Understanding the Internals of iOS Devices
3. Data Acquisition from iOS Devices
4. Data Acquisition from iOS Backups
5. iOS Data Analysis and Recovery
6. iOS Forensic Tools
7. Understanding Android
8. Android Forensic Setup and Pre-Data Extraction Techniques
9. Android Data Extraction Techniques
10. Android Data Analysis and Recovery
11. Android App Analysis, Malware, and Reverse Engineering
12. Windows Phone Forensics
13. Parsing Third-Party Application Files

Biografía del autor

Rohit Tamma is a security program manager currently working with Microsoft. With over 8 years of experience in the field of security, his background spans management and technical consulting roles in the areas of application and cloud security, mobile security, penetration testing, and security training. Rohit has also coauthored couple of books, such as Practical Mobile Forensics and Learning Android Forensics, which explain various ways to perform forensics on the mobile platforms. You can contact him on Twitter at @RohitTamma. Oleg Skulkin is a digital forensics "enthusional" (enthusiast and professional) from Russia with more than 6 years of experience, and is currently employed by Group-IB, one of the global leaders in preventing and investigating high-tech crimes and online fraud. He holds a number of certifications, including GCFA, MCFE, and ACE. Oleg is a coauthor of Windows Forensics Cookbook, and you can find his articles about different aspects of digital forensics both in Russian and foreign magazines. Finally, he is a very active blogger, and he updates the Cyber Forensicator blog daily. Heather Mahalik is the director of forensic engineering with ManTech CARD, where she leads the forensic effort focusing on mobile and digital exploitation. She is a senior instructor and author for the SANS Institute, and she is also the course leader for the FOR585 Advanced Smartphone Forensics course. With over 15 years of experience in digital forensics, she continues to thrive on smartphone investigations, digital forensics, forensic course development and instruction, and research on application analysis and smartphone forensics. Satish Bommisetty is a security analyst working for a Fortune 500 company. His primary areas of interest include iOS forensics, iOS application security, and web application security. He has presented at international conferences, such as ClubHACK and C0C0n. He is also one of the core members of the Hyderabad OWASP chapter. He has identified and disclosed vulnerabilities within the websites of Google, Facebook, Yandex, PayPal, Yahoo!, AT&T, and more, and they are listed in their hall of fame.