High Technology Crime Investigation Association
Prev MonthPrev Month Next MonthNext Month
The Cat and Mouse Game with iOS Forensics
Tuesday, June 02, 2020 2:00 AM EST to Saturday, June 06, 2020
Category: Webinar

iOS forensics has been a hot topic over the last few years. Apple is constantly strengthening its security measures on their devices such as iPhones, iPADs, Apple TV, Apple Watch etc. This was designed to prevent hackers and by doing so law enforcement investigators access to its devices, Things like remote phone wiping, not allowing the passing of data through lightning cable, requests to enter a PIN after potentially suspicious actions (like changing a SIM card), 6-digit PIN by default etc, make digital investigations much more difficult.

There are, however, some breakthrough advances in the field of Apple device forensics, such as checkm8 and checkra1n jailbreak. These advances gave investigators the forgotten possibility to acquire so called "full file system copy", which has far more data than a regular iTunes backup. Under some circumstances there is a possibility to acquire data even without a jailbreak!

New version of Belkasoft Evidence Center supports an important feature of checkm8-based acquisition. This feature can extract data from both unlocked and locked devices. Yuri Gubanov, CEO and founder of Belkasoft will speak about the latest advances in iOS forensics with Belkasoft, will demo the checkm8-based extractions and compare evidence found in two images made from the same iPhone in an unlocked and locked state.


Speaker Bio:

Yuri Gubanov is a renowned digital forensics expert. He is a frequent speaker at industry-known conferences such as HTCIA, EnFuse/CEIC, FT-Day, CAC, CACP, ICDDF, and others. With years of experience in digital forensics and security domain, Yuri led forensic training courses for multiple law enforcement departments in several countries.