Search icon CANCEL
Subscription
0
Cart icon
Your Cart (0 item)
Close icon
You have no products in your basket yet
Arrow left icon
Explore Products
Best Sellers
New Releases
Books
Videos
Audiobooks
Learning Hub
Free Learning
Arrow right icon
Arrow up icon
GO TO TOP
iOS Forensics Cookbook

You're reading from   iOS Forensics Cookbook Over 20 recipes that will enable you to handle and extract data from iOS devices for forensics

Arrow left icon
Product type Paperback
Published in Jan 2016
Publisher
ISBN-13 9781783988464
Length 184 pages
Edition 1st Edition
Tools
Concepts
Arrow right icon
Authors (2):
Arrow left icon
Bhanu Birani Bhanu Birani
Author Profile Icon Bhanu Birani
Bhanu Birani
Mayank Birani Mayank Birani
Author Profile Icon Mayank Birani
Mayank Birani
Arrow right icon
View More author details
Toc

Extracting and reading data

It is very important to understand the basics of the file system before you learn about the ways of extracting and reading data from the iOS device disk. All Apple operating systems use the same file system, hierarchical file system (HFS).

This file system works with the 512 byte-formatted block scheme. To categorize it further, these blocks are divided into two parts: allocation blocks and logical blocks. Logical blocks are available on the volume numbered from the first to the last block. These blocks remain static on the disk. Allocated blocks work with a different strategy; they can be grouped together to utilize the HFS more efficiently. The file structure includes the Allocation and Attributes Files, along with the Volume Header and Catalog Files, and so on.

Getting ready

To understand the extraction well, we will study a little about some of the headers of the HFS file system in detail.

The HFS+ Volume Header

For the HFS format disk, the boot blocks are sectors...

lock icon The rest of the chapter is locked
Register for a free Packt account to unlock a world of extra content!
A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.
Unlock this book and the full library FREE for 7 days
Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of
Renews at $19.99/month. Cancel anytime
Banner background image