Forensic analysis of iPhone backups - Exploit Database
Forensic analysis of iPhone backups - Exploit Database
Forensic analysis of iPhone backups - Exploit Database
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
(Figure 4)<br />
This 40 digit hex file name in the backup folder is the SHA1 hash value <strong>of</strong> the file path appended to<br />
the respective domain name with a ‘-‘ symbol. So the hash <strong>of</strong> DomainName-filepath will match to the<br />
correct file in the backup. In iOS 5, applications and inside data are classified into 12 domains<br />
(11 system domains and one application domain). The list <strong>of</strong> system domains can be viewed from<br />
/System/Library/Backup/Domains.plist file on the <strong>iPhone</strong>. Domains.plist file content is shown in<br />
Figure 5.
Change language