iPhone Forensics - Data acquisition from iOS backups

Detailed article on recovering the data from iOS backups.

This article explains the technical procedure and challenges involved in extracting data and artefacts from the iPhone backups. Understanding the forensics techniques on iTunes backups is also useful in cases where we get physical access to the suspect’s computer instead of the iPhone directly.

The article will cover,
-Detailed analysis of iOS 5 backups
-Techniques to read iOS 5 backups
-Extracting AES keys from iPhone
-Steps to decrypting iOS keychain

Complete article is available at-
Part 1 http//www.securitylearn.net/2012/05/06/iphone-forensics-analysis-of-ios-5-backups/
Part 2 http//www.securitylearn.net/2012/05/30/iphone-forensics-analysis-of-ios-5-backups-part2/
Part 3 (video demos) http//www.securitylearn.net/2012/06/29/iphone-forensics-analysis-of-ios-5-backups-video/