Hello everyone, i think it's been like ages since i last posted on this forum.. so.. hello again everyone old and new forensicators )
I'm here begging you for help because let's be honest.. with this thing, i'm in big s***t.
I've received what the counterpart called a "forensic acquisition" (don't have me comment on this) of an iOS device, which was made with paraben device seizure (and don't have me comment on this either).
The problem is that i've received a "blob of data" inside a file that is a .ds file and the proprietary reader application.
problem the reader application doesn't give me a level of access to data, low enaugh for me to work on the evidence in the way i want. and it doesn't parse the data i'm looking for.
So.. basically, it's useless.
I was wondering if anyone knows
in side this .ds file is there the actual iphone backup? according to the size it's 15GB, so i really HOPE so…
and if yes (please be a yes), is there a way to extract the raw backup so that i can parse it with my own favorite toolchain?
thanks in advance for your kind help and reply.