Hello DFIR Community! It has been a while since my last post (excluding the nominations’ post of course). I am currently working on another research project and I am sure that by the end of the summer, I will be able to share with you some useful insights. Nonetheless, in this post I would like to share with you a guide on iOS Acquisition. I created this guide using all the information provided by Mattia Epifani (@mattiaep) at his latest talk. This talk took place at BelkaDay Europe 2021 (https://belkasoft.com/forms/belkaday_europe_2021). It was a really nice and resourceful 2-day conference. I would advise to ask @Belkasoft access to the recordings, in case you missed it.
Anyway, as you all know Mattia Epifani is one of the greatest researchers this community has to offer. His research focus on (but not limited to) Apple Ecosystem. He is both independent and tool-agnostic, which adds extra credit to his research. In his talk, Mattia included all the possible ways that you can use to acquire an iPhone, starting from iPhone 4s up to the latest there is available. As I am not an expert on iOS, I thought to myself why not putting all this useful information Mattia shared into a guide. This way, anyone in the DFIR community who does not know how to best handle such a device, will know exactly what steps to take. Mattia helped even more, not only by evaluating this guide, but also by improving it. Thank you Mattia for that as well!
So, this was the motivation behind this guide. Feel free to download it and I really hope it serve you well. Be sure to follow Mattia Epifani (@mattiaep) and read his website (https://www.realitynet.it/en/) for more iOS state-of-the-art research. Cheers!