Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
Practical Mobile Forensics

You're reading from   Practical Mobile Forensics Forensically investigate and analyze iOS, Android, and Windows 10 devices

Arrow left icon
Product type Paperback
Published in Apr 2020
Publisher Packt
ISBN-13 9781838647520
Length 400 pages
Edition 4th Edition
Languages
Tools
Concepts
Arrow right icon
Authors (4):
Arrow left icon
Heather Mahalik Heather Mahalik
Author Profile Icon Heather Mahalik
Heather Mahalik
Oleg Skulkin Oleg Skulkin
Author Profile Icon Oleg Skulkin
Oleg Skulkin
Rohit Tamma Rohit Tamma
Author Profile Icon Rohit Tamma
Rohit Tamma
Satish Bommisetty Satish Bommisetty
Author Profile Icon Satish Bommisetty
Satish Bommisetty
Arrow right icon
View More author details
Toc

Table of Contents (18) Chapters Close

Preface 1. Introduction to Mobile Forensics 2. Section 1: iOS Forensics FREE CHAPTER
3. Understanding the Internals of iOS Devices 4. Data Acquisition from iOS Devices 5. Data Acquisition from iOS Backups 6. iOS Data Analysis and Recovery 7. iOS Forensic Tools 8. Section 2: Android Forensics
9. Understanding Android 10. Android Forensic Setup and Pre-Data Extraction Techniques 11. Android Data Extraction Techniques 12. Android Data Analysis and Recovery 13. Android App Analysis, Malware, and Reverse Engineering 14. Section 3: Windows Forensics and Third-Party Apps
15. Windows Phone Forensics 16. Parsing Third-Party Application Files 17. Other Books You May Enjoy

Other important files

Apart from SQLite and plist files, several other locations may contain information that could be valuable to an investigation.

The other sources include the following:

  • Local dictionary
  • Photos
  • Thumbnails
  • Wallpaper
  • Downloaded third-party applications

Let's look at each of them.

Local dictionary

The list of words added by the device user to the dictionary are stored in a LocalDictionary plaintext file, located at /KeyboardDomain/Library/Keyboard/. As the file is plaintext, you can use your favorite text editor.

Photos

Photos are stored in a directory...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image