iPhone Forensic Gui...
 
Notifications
Clear all

iPhone Forensic Guidance and Policies

8 Posts
4 Users
0 Reactions
866 Views
(@joeltharas)
Trusted Member
Joined: 16 years ago
Posts: 53
Topic starter  

Hi!

I will be doing a Project about forensic analysis of iPhone with particular regard to issuing guidance, policies, making sense of evidence and I was wondering if anyone could guide me through a list of things that they have encountered when analysing iPhones that could be used to issue guidance and Policies. Most importantly if they have created any guidance and Policies that they will be happy to share or to point me to any document that provides Guidance and Policies for iPhones.
Thank You!
Joe.


   
Quote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
 

Joel have you look at the various examination and iPhone articles posted at

http//www.e-evidence.info/cellarticles.html

?


   
ReplyQuote
(@joeltharas)
Trusted Member
Joined: 16 years ago
Posts: 53
Topic starter  

Thank You Trewmte.

I have not looked at these various examination and iPhone articles posted on the pointed website. I really like it.
Thank you again!
Joe.


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
 

Joel
Whilst looking at examination processes and procedures have a look at this recent thread at FF

http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=6531

I haven't, as yet, seen a paper written how to handle mobile examinations where the handset contains spyware. The power on/boot up may activate a process in the handset that might change data, if you get the drift of my line of thinking.


   
ReplyQuote
(@joeltharas)
Trusted Member
Joined: 16 years ago
Posts: 53
Topic starter  

Thank You once again Trewmte.

Joel.


   
ReplyQuote
(@north55deg)
New Member
Joined: 17 years ago
Posts: 3
 

Two links for you

1) http//viaforensics.com/wpinstall/wp-content/uploads/2009/03/iPhone-Forensics-2009.pdf

A white paper

2) http//www.zdziarski.com/blog/

Some interesting points if you look around


   
ReplyQuote
(@joeltharas)
Trusted Member
Joined: 16 years ago
Posts: 53
Topic starter  

Thanks a lot north55deg.

Joe.


   
ReplyQuote
(@muirner)
Trusted Member
Joined: 17 years ago
Posts: 65
 

2) http//www.zdziarski.com/blog/

Some interesting points if you look around

Unless your LE, getting your hopes up with Zdziarski is a worthless adventure. He wont even respond to requests for help or guidance. If your LE though, his tools are for you.


   
ReplyQuote
Share: