Notifications
Clear all

BackUp IOS & SnapShot

4 Posts
3 Users
0 Likes
1,447 Views
(@alf95)
Posts: 43
Eminent Member
Topic starter
 

Hi everybody,

I have a iPhone's BackUp created in July 2013 and within this folder a subfolder called "Snapshot" created in september which contain 350MB data (more 7Gb for the original backup)… For example I found safari history visited between july and september but not the SMS.
Somebody know why this subfolder has been created ?

Regards,

 
Posted : 03/06/2014 7:20 pm
(@mcman)
Posts: 189
Estimable Member
 

Hey Alf95,

iOS typically takes snapshots of a user's screen when an application is is suspended by pressing the home screen or switching between apps so that it can be shown while being reloaded. This is all stored in the snapshots folder. Sometimes this can have valuable information for the investigator, sometimes it's just a screenshot but they're definitely worth looking through depending on your case.

Hope that helps.

 
Posted : 03/06/2014 9:20 pm
(@mobileforensicswales)
Posts: 274
Reputable Member
 

If you have 2 check the naming, one could be last landscape close the other the last portrait close

 
Posted : 04/06/2014 1:48 am
(@alf95)
Posts: 43
Eminent Member
Topic starter
 

Thanks, I'll go to make tests with same iPhone & IOS to make it clear

 
Posted : 04/06/2014 3:28 am
Share: