If you'd like to learn more on iOS forensics or data recovery, we can recommend a handful of resources.
General resources from Apple
- "Apple Support for the iPhone" apple.com
Fun fact: numerous Apple Geniuses around the world recommend our software to customers with backup / data issues.
- "Apple iPhone Support Communities" discussions.apple.com
- “iPhone and iPod touch: About backups” support.apple.com
- “Backing Up, updating, and restoring your iPhone and iPod touch software” support.apple.com
Technical resources
- "Technology, security analysis", blog section, reincubate.com
- "How to decrypt encrypted backups" stackoverflow.com
Our question on StackOverflow from 2009: we solved this a year before anyone else figured it out!
- /r/computerforensics's FAQ reddit.com
- The iPhone Wiki theiphonewiki.com
- ricloud API documention reincubate.com
There's some helpful stuff here for learning in more general terms about how the iCloud works.
- DeviceIdentifier API documentation reincubate.com
Useful guidance on Apple identifiers, what they mean, and what information can be obtained with them.
Recommended books
This book was written by Jonathan Zdziarski, one of the leading iOS forensics guys... until he went to work for Apple!
- "Macintosh OS X, iPod, and iPhone Forensic Analysis DVD Toolkit" amazon.co.uk
- "iOS Forensic Analysis: For iPhone, iPad, and iPod Touch" amazon.co.uk
Please drop us a note if you can recommend other great resources.
