Hi everybody,
I have a iPhone's BackUp created in July 2013 and within this folder a subfolder called "Snapshot" created in september which contain 350MB data (more 7Gb for the original backup)… For example I found safari history visited between july and september but not the SMS.
Somebody know why this subfolder has been created ?
Regards,
Hey Alf95,
iOS typically takes snapshots of a user's screen when an application is is suspended by pressing the home screen or switching between apps so that it can be shown while being reloaded. This is all stored in the snapshots folder. Sometimes this can have valuable information for the investigator, sometimes it's just a screenshot but they're definitely worth looking through depending on your case.
Hope that helps.
If you have 2 check the naming, one could be last landscape close the other the last portrait close
Thanks, I'll go to make tests with same iPhone & IOS to make it clear