RECORDED 03/05/19

Apple’s iOS runs on some of the most popular mobile devices on the planet, used by millions of people every day. There are a large number of forensic tools which can successfully extract helpful data from these devices to aid in our investigations. But what happens if the device is no longer available to us? What if the device has been destroyed or disabled in order to prevent our examination? What if the data on the device has changed, and the key piece we are looking for is no longer present?

All may not be lost in these situations, because iOS device backup files are often available to us, and they can be examined just like the device itself, using a variety of tools.

In this webinar, we will examine the process of creation of, the location and structure of, the data contained in, and the tools that will help us analyze iOS device backup files.

Some topics will include:

The creation and structure of iOS backup files
– How and when are they created?
– Where are they located?
– What do they contain?
– How will we access them?

The examination of iOS backup files
– Forensic tools
– Inexpensive alternatives
– Manual examination


Please Note: Following purchase, you will receive an email with a link to the materials for this webinar.  This link will be valid for 5 days, and will allow you to download all the materials.  These will include a high quality version recording of the webinar (along with a player for that video format), a lower quality version of the webinar that can be viewed on nearly any device, a PDF version of the instructor’s presentation and note taking pages, and any other materials supplied by the instructor during the webinar.

The download of this webinar also includes a certificate of attendance for one viewer.  Instructions on how to access the quiz for this webinar and download a certificate will be included in the webinar recording.