Chapter 6. iOS Forensic Tools
Although understanding acquisition methods and techniques is helpful, a forensic examiner often needs the help of tools to accomplish tasks in the given time. Forensic tools not only save time but also make the process a lot easier. Currently, there are many commercial tools such as Elcomsoft iOS Forensic Toolkit, Cellebrite UFED, BlackLight, Oxygen Forensic Suite, AccessData MPE+, iXAM, Lantern, XRY, SecureView, Paraben iRecovery Stick, and so on, which are available for forensic acquisition and analysis of an iOS device. For familiarity purposes, this chapter will walk you through the usage of a few commercial and open source tools and provide details of the steps required to perform acquisitions of iOS devices.