A hands-on guide to mastering mobile forensics for the iOS, Android, and the Windows Phone platformsAbout This Book• Get to grips with the basics of mobile forensics and the various forensic approaches• Retrieve and analyze the data stored on mobile devices and on the cloud• A practical guide to leverage the power of mobile forensics on the popular mobile platforms with lots of tips, tricks and caveatsWho This Book Is ForThis book is for forensics professionals who are eager to widen their forensics skillset to mobile forensics and acquire data from mobile devices.What You Will Learn• Discover the new features in practical mobile forensics• Understand the architecture and security mechanisms present in iOS and Android platforms• Identify sensitive files on the iOS and Android platforms• Set up the forensic environment• Extract data on the iOS and Android platforms• Recover data on the iOS and Android platforms• Understand the forensics of Windows devices• Explore various third-party application techniques and data recovery techniquesIn DetailMobile phone forensics is the science of retrieving data from a mobile phone under forensically sound conditions. This book is an update to Practical Mobile Forensics and it delves into the concepts of mobile forensics and its importance in today's world.We will deep dive into mobile forensics techniques in iOS 8 - 9.2, Android 4.4 - 6, and Windows Phone devices. We will demonstrate the latest open source and commercial mobile forensics tools, enabling you to analyze and retrieve data effectively. You will learn how to introspect and retrieve data from cloud, and document and prepare reports for your investigations.By the end of this book, you will have mastered the current operating systems and techniques so you can recover data from mobile devices by leveraging open source solutions.Style and approach This book takes a very practical approach and depicts real-life mobile forensics scenarios with lots of tips and tricks to help acquire the required forensics skillset for various mobile platforms.

Frequently asked questions

Yes, you can cancel anytime from the Subscription tab in your account settings on the Perlego website. Your subscription will stay active until the end of your current billing period. Learn how to cancel your subscription.

No, books cannot be downloaded as external files, such as PDFs, for use outside of Perlego. However, you can download books within the Perlego app for offline reading on mobile or tablet. Learn more here.

Perlego offers two plans: Essential and Complete

Essential is ideal for learners and professionals who enjoy exploring a wide range of subjects. Access the Essential Library with 800,000+ trusted titles and best-sellers across business, personal growth, and the humanities. Includes unlimited reading time and Standard Read Aloud voice.
Complete: Perfect for advanced learners and researchers needing full, unrestricted access. Unlock 1.4M+ books across hundreds of subjects, including academic and specialized titles. The Complete Plan also includes advanced features like Premium Read Aloud and Research Assistant.

Both plans are available with monthly, semester, or annual billing cycles.

We are an online textbook subscription service, where you can get access to an entire online library for less than the price of a single book per month. With over 1 million books across 1000+ topics, we’ve got you covered! Learn more here.

Look out for the read-aloud symbol on your next book to see if you can listen to it. The read-aloud tool reads text aloud for you, highlighting the text as it is being read. You can pause it, speed it up and slow it down. Learn more here.

Yes! You can use the Perlego app on both iOS or Android devices to read anytime, anywhere — even offline. Perfect for commutes or when you’re on the go.
Please note we cannot support devices running on iOS 13 and Android 7 or earlier. Learn more about using the app.

Yes, you can access Practical Mobile Forensics - Second Edition by Heather Mahalik, Rohit Tamma, Satish Bommisetty, Rohit Tamma, Satish Bommisetty in PDF and/or ePUB format, as well as other popular books in Computer Science & Computer Networking. We have over one million books available in our catalogue for you to explore.

Information

Publisher

Packt Publishing

Year

2016

eBook ISBN

9781786465610

Edition

Topic

Computer Science

Subtopic

Computer Networking

Index

Computer Science

Practical Mobile Forensics - Second Edition

All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the authors, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

First published: July 2014

Second published: May 2016

Production reference: 1130516

Published by Packt Publishing Ltd.

Livery Place

35 Livery Street

Birmingham B3 2PB, UK.

ISBN 978-1-78646-420-0

www.packtpub.com

Credits

Authors Heather Mahalik Rohit Tamma Satish Bommisetty	Copy Editor Pranjali Chury
Reviewer Donnie Tindall	Project Coordinator Suzanne Coutinho
Commissioning Editor Priya Singh	Proofreader Safis Editing
Acquisition Editor Rahul Nair	Indexer Rekha Nair
Content Development Editors Amey Varangaonkar Merint Mathew	Production Coordinator Manu Joseph
Technical Editor Vivek Pala	Cover Work Manu Joseph

About the Authors

Heather Mahalik is a principal forensic scientist with Oceans Edge, Inc., where she leads the forensic effort focusing on mobile and digital exploitation. She is a senior instructor and author for the SANS Institute, and she is also the course leader for the FOR585 Advanced Smartphone Forensics course. With over 13 years of experience in digital forensics, she continues to thrive on smartphone investigations, forensic course development and instruction, and research on application analysis and smartphone forensics.

Prior to joining Oceans Edge, Heather was the Mobile Exploitation Team Lead at Basis Technology. When starting her career, she worked at Stroz Friedberg and for the U.S. Department of State Computer Investigations and Forensics Lab as a contractor. Heather earned her bachelor's degree from West Virginia University. She co-authored Practical Mobile Forensics (First edition) and was the technical reviewer for Learning Android Forensics. She has authored white papers and forensic course material and has taught hundreds of courses worldwide to Law Enforcement, Military, Government, IT, eDiscovery, and other forensic professionals focusing on mobile device and digital forensics.

My first book was dedicated to the people who afforded me the opportunity to grow into the examiner I am today. This book is dedicated to those who push me to keep learning and allow me to share my knowledge – my students. Without you, I would not have had a reason to stay ahead of the curve, find those odd artifacts, and learn ways to outsmart the tools. You give me motivation to keep charging ahead. I would also like to thank metr0 for affording me opportunities to do things in my career that stretch far outside of what the norm is in forensics. I will be forever grateful.

To my husband, thank you for being such a great dad and for picking up the slack so that I can work as hard as I do. To Jack, always remember that your mama wants to be home with you and misses you while she's away. Remember that my work is important and teaching others the right way to conduct digital examinations may make your world a safer and better place. "The students" are happy you let them borrow your mommy. I would not be where I am today or able to travel and teach as much as I do without my amazing family and students.

Rohit Tamma is a security analyst currently working with Microsoft. With over 7 years of experience in the field of security, his background spans consulting/analyst roles in the areas of application security, mobile security, penetration testing, and security training. His past experiences include working with Accenture, ADP, and TCS, driving security programs for various client teams. Rohit has also coauthored Learning Android Forensics, which explains various techniques to perform forensics on the Android platform. You can contact him at [email protected] or on Twitter at @RohitTamma.

Writing this book has been a great experience as it has taught me several things, which could not have been possible otherwise . I would like to dedicate this book to my parents for helping me in every possible way throughout my life.

Satish Bommisetty is a security analyst working for a Fortune 500 company. His primary areas of interest include iOS forensics, iOS application security, and web application security. He has presented at international conferences, such as ClubHACK and C0C0n. He is also one of the core members of the Hyderabad OWASP chapter. He has identified and disclosed vulnerabilities within the websites of Google, Facebook, Yandex, PayPal, Yahoo!, AT&T, and more, and is listed in their hall of fame.

I would like to thank everyone who encouraged me while producing this book.

About the Reviewer

Donnie Tindall is an assistant vice president of cyber security and digital forensics at Deutsche Bank. He previously spent many years as a US government contractor focusing on mobile forensics and provided unique solutions to challenging forensic issues. He was also responsible for the development and teaching of various forensic courses to government and military users. Donnie has performed thousands of mobile device examinations, including on Nokia, BlackBerry, Android, and iPhone devices. He is also an IACIS Certified Forensic Computer Examiner, author of Learning Android Forensics, and instructor for FOR585 - the SANS Institute’s smartphone forensics course.

www.PacktPub.com

For support files and downloads related to your book, please visit www.PacktPub.com.

eBooks, discount offers, and more

Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.com and as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at [email protected] for more details.

At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

https://www2.packtpub.com/books/subscription/packtlib

Do you need instant solutions to your IT questions? PacktLib is Packt's online digital book library. Here, you can search, access, and read Packt's entire library of books.