Subscription

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Learning Hub

Conferences

Free Learning

You're reading from Python Digital Forensics Cookbook Effective Python recipes for digital investigations

Product type Paperback

Published in Sep 2017

Publisher Packt

ISBN-13 9781783987467

Length 412 pages

Edition 1st Edition

Languages

Python

Tools

SQLite

Concepts

Forensics

Authors (2):

Chapin Bryce

Preston Miller

View More author details

Table of Contents (11) Chapters

Preface

1. Essential Scripting and File Information Recipes FREE CHAPTER

2. Creating Artifact Report Recipes

3. A Deep Dive into Mobile Forensic Recipes

4. Extracting Embedded Metadata Recipes

5. Networking and Indicators of Compromise Recipes

6. Reading Emails and Taking Names Recipes

7. Log-Based Artifact Recipes

8. Working with Forensic Evidence Container Recipes

9. Exploring Windows Forensic Artifacts Recipes - Part I

10. Exploring Windows Forensic Artifacts Recipes - Part II

Processing iTunes backups

Recipe Difficulty: Easy

Python Version: 2.7 or 3.5

Operating System: Any

In this recipe, we will convert unencrypted iTunes backups into a human-readable format, allowing us to easily explore its contents without any third-party tools. Backups can be found in the MobileSync\Backup folder on the host computer.

For details on default iTunes backup locations for Windows and OS X, visit https://support.apple.com/en-us/HT204215.

If an Apple product has been backed up to the machine, there will be a number of folders whose name is a GUID representing a specific device within the backup folder. These folders contain differential backups for each device over a period of time.

With the new backup format introduced in iOS 10, files are stored in subfolders containing the first two hexadecimal characters of the file name. Each file's name is a SHA-1 hash of...

The rest of the chapter is locked

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at AU $24.99/month. Cancel anytime

Authors (2)

Chapin Bryce

Chapin Bryce is a senior consultant at a global firm that is a leader in digital forensics and incident response investigations. After graduating from Champlain College, with a bachelor's degree in computer and digital forensics, Chapin dove into the field of digital forensics and incident response joining the GIAC advisory board and earning four GIAC certifications: GCIH, GCFE, GCFA, and GNFA. As a member of multiple ongoing research and development projects, he has authored several books and articles in professional and academic publications, including Python Digital Forensics Cookbook (2018 Digital Forensics Book of the Year, Forensic 4Cast), Learning Python for Forensics First Edition, and Digital Forensic Magazine.

See other products by Chapin Bryce

Miller

Preston Miller is a consultant at an internationally recognized risk management firm. Preston holds an undergraduate degree from Vassar College and a master's degree in digital forensics from Marshall University. While at Marshall, Preston unanimously received the prestigious J. Edgar Hoover Foundation's scientific scholarship. Preston is a published author, recently of Python Digital Forensics Cookbook, which won the Forensic 4:cast Digital Forensics Book of the Year award in 2018. Preston is a member of the GIAC advisory board and holds multiple industry-recognized certifications in his field.

See other products by Miller