This presentation will discuss usage information on an iPhone that should be obtained prior to a forensic exam. If you have a cooperative subject willing to provide their device passcode - what would you look for on their device? Beyond photos, text messages, and installed apps - what else could you search for?It is highly recommended that attendees bring their iOS mobile device to participate in this interactive presentation so they can follow along online with the instructor. Electrical outlets will not be available so be sure your device is fully charged.
Learning Objectives:
Understand options to document evidence during an iPhone preview
Important iOS artifacts to review
How to determine if your subject has an iOS device prior to making contact with them
