Extracting and reading data
It is very important to understand the basics of the file system before you learn about the ways of extracting and reading data from the iOS device disk. All Apple operating systems use the same file system, hierarchical file system (HFS).
This file system works with the 512 byte-formatted block scheme. To categorize it further, these blocks are divided into two parts: allocation blocks and logical blocks. Logical blocks are available on the volume numbered from the first to the last block. These blocks remain static on the disk. Allocated blocks work with a different strategy; they can be grouped together to utilize the HFS more efficiently. The file structure includes the Allocation and Attributes Files, along with the Volume Header and Catalog Files, and so on.
Getting ready
To understand the extraction well, we will study a little about some of the headers of the HFS file system in detail.
The HFS+ Volume Header
For the HFS format disk, the boot blocks are sectors...