iPhone and iOS Forensics

Investigation, Analysis and Mobile Security for Apple iPhone, iPad and iOS Devices


  • Andrew Hoog, is a computer scientist, certified forensic analyst (GCFA and CCE), computer and mobile forensics researcher, former adjunct professor (assembly language) and owner of viaForensics, an innovative computer and mobile forensic firm.
  • Katie Strzempka, Technology Consultant with viaForensics. She performs forensic investigations, security audits and research, and has trained investigators around the world in mobile forensics.

As sales and usage of iPhones increase so does the demand on organizations that conduct examinations on this device. iPhone and iOS Forensics takes an in-depth look at methods and processes that analyze the iPhone/iPod in an official legal manner. All of the methods and procedures outlined in the book can be taken into any court room. This book details the iPhone with information data sets that are new and evolving, with official hardware knowledge from Apple itself to help aid investigators.


View full description


Forensic investigators (corporate and law enforcement) and incident response professionals.


Book information

  • Published: June 2011
  • Imprint: SYNGRESS
  • ISBN: 978-1-59749-659-9


"iPhone and iOS Forensics is a must read by all digital forensic examiners, even the most educated person in the iPhone environment will discover something new in this highly valuable book. The author has proven himself many times over to be a valuable resource to the digital community at large, and this book is the culmination of all of that work. I will not conduct another iOS analysis without using this book as my reference!"
-Ryan R. Kubasiak, Investigator, Computer Crime Unit and Editor AppleExaminer.com

"Covering iOS file system information, device application and security, acquisition and analysis methods, this book takes one from basic to advanced information and techniques related to the iOS family of devices. Andrew and Katie have put together a valuable resource for security professionals and forensic examiners alike."
-Danny Garcia, DG Digital Services, LLC

"This book is an excellent reference for examiners in the field, looking to understand the many different approaches to forensic imaging of an iPhone."
Jonathan Zdziarski, iPhone forensics expert

Table of Contents

    Chapter 1. Overview
    Chapter 2. Device features and functions
    Chapter 3. iOS and File System
    Chapter 4. Data Storage
    Chapter 5. Acquisitions
    Chapter 6. Data and Application Analysis
    Chapter 7. Commercial Tool Testing