#Iphone backup extractor mac review android#

#Iphone backup extractor mac review android#

However, in the literature, there are very few forensic analysis and comparison related to IM applications such as WhatsApp, Viber and Skype and Tango on both iOS and Android platforms, even though the total users of this application already exceeded 1 billion. Recently, most research on IM forensics focus on applications such as WhatsApp, Viber and Skype. Traces and Evidence left by applications can be held on smart phones and retrieving those potential evidences with right forensic technique is strongly required. Indeed, the increased use of Instant Messengers on smart phones has turned to be the goldmine for mobile and computer forensic experts. The reason is an IM can serve as a very useful yet very dangerous platform for the victim and the suspect to communicate. Although IM applications are ubiquitous communication tools nowadays, it was observed that the relevant research on the topic of evidence collection from IM services was limited. The advent of the Internet has significantly transformed the daily activities of millions of people, with one of them being the way people communicate where Instant Messaging (IM) and Voice over IP (VoIP) communications have become prevalent. Finally, a taxonomy of potential information of forensic interest is included, highlighting common filenames the contained information and their purpose in an investigation. Tools such as the iphonebackupbrowser, iPhone/iPod Backup Extractor and Oxygen Forensic Suite are discussed for their suitability with extracting iPhone backup data.

Information about the property lists (plist files) containing information about the backed-up device and its contents are detailed, along with the mbdb/mbdx database files, and finally the extension-less backup files, is provided. The paper introduces the backup directories for various common operating systems, and exposes the contents. This paper serves to provide an overview of the information attainable via the analysis of an iPhone backup, making references to the applicability of such analysis in the digital forensics field. IPhone logical backup files can provide forensic examiners with almost the entire contents of its host phone up until the point that the backup took place.