±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 36312
New Yesterday: 7 Visitors: 179

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

iBooks Location and Extraction Question

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts

Senior Member

iBooks Location and Extraction Question

Post Posted: Feb 13, 17 16:08


I'm looking for any help on the storage of iBooks on IOS 10.2.1 and why the location is where it is?

I have a list of PDF files (non purchased from iTune, all downloaded from the Internet)

The locations are all

/private/var/mobile/Library/Mobile Documents/iCloud~com~apple~iBooks/Documents/...

However, we have checked the iCloud and there is nothing in it, all the PDFs are on the device, yet the pointers from the iBook SQLite Database point to the iCloud. I am assuming this his just something Apple does and no specific reason for it (Standard Apple really!!: Confused )

If anybody could verify this I'd be much grateful, confirm I'm not losing my mind!

Also, if anybody knows anyway to get a non purchased .pdf off an iPhone 6 running 10.2.1 I would probably pay them large amount of money (or cake!)

I've researched the whole internet and it appears to be impossible. Literally.
CelleBrite Method 2 is not supposed for this version of IOS, I'm stuck manually downloading by the looks of it. Urgh!


Page 1 of 1