iTunes is not forensically sound, and it’s never been. That said, using iTunes during an investigation is the worst idea ever. Normally, accessing shared files would require using Apple iTunes. You’ll need a computer to access those files. Settings | General | iPhone storage lists a bunch of apps with data, but it does not make a difference between shared files and sandboxed app data. When analysing an iOS device, you won’t be able to tell which apps have shared files, and which don’t. For example, we could not think of a legitimate reason for the MiniKeePass password manager to expose its password database via the file sharing mechanism – yet it does. The file sharing mechanism is sometimes enabled by app developers by an accident. Many video players allow uploading subtitles and custom fonts, a feature that is also available from certain third-party book readers. Another popular use for file sharing is by media players allowing to upload videos in formats that are not natively supported by iOS to avoid iTunes transcoding them. As an example, users can upload a bunch of e-books or PDF documents into Adobe Reader, or transfer documents into the Microsoft Office app. The file sharing mechanism was developed by Apple to allow users transfer files between their computer and apps in their iOS devices. About File Sharing on iPhone, iPad, and iPod touch.If you are not familiar with iOS and its file sharing mechanism, please refer to this article first: We’ll show you how this works with iOS Forensic Toolkit 3.0. While there’s nothing we can do about a Lightning cable, we can at least get rid of iTunes middleware for extracting files exposed by iOS apps. While uploading or downloading shared files from an Android or Windows 10 smartphone occurs over a standard MTP connection established over a standard USB cable, you’ll need several hundred megabytes worth of proprietary Apple software (and a proprietary Lightning cable) to transfer files between iOS apps and the computer. Yet, individual iOS apps are allowed to let the user access their files by using the file sharing mechanism. Unlike every other major mobile OS, iOS does not have a “shared” area in the file system to allow apps keep and share files with other apps. IOS is a locked down mobile operating system that does not allow its apps to directly access files in the file system.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |