iPhone Forensics

Apple iPhone continues to proliferate despite the global recession.  In the final quarter of 2009 sales figures were estimated at 11.3 million worldwide.  Apple seem to have cornered the UK smartphone (a phone offering advanced, usually PC like functionality) market - with 76% of smartphone users having opted for iPhones.  Not only can iPhones be used to make phone calls and send and recieve text messages, they can be used to access the Internet, access websites and send and receive emails - amongst a plethora of other functions.  Apple’s iPhone is essentially a computer that fits into the palm of your hand.

Clearly the proliferation of iPhones causes complexities to those concerned with investigations where a user may have had access to such a device.  Fortunately, CY4OR has developed forensic and data recovery techniques that facilitate the interrogation of iPhones and the recovery of deleted data.  Using these techniques it is possible to investigate where an iPhone has previously been used and how it has been employed.

CY4OR has previously assisted clients with the interrogation of iPhones by recovering deleted voicemail messages, pictures, emails, calendar entries, address book entries and even text messages (amongst other data).  Embedded data found within recovered photographs has even been examined to determine where the photograph was taken.
 

What data can be retrieved?

Depending on the case objectives of the client, it is possible to retrieve both live and deleted data from an iPhone.  The following information can be ascertained:
 

• SMS
• Email
• Call history & voicemail
• Photos
• Calendar events & alarms
• Internet history & bookmarks
• Address book contents
• Typing cache

Additionally the following configuration information maybe ascertained:
 

• iTunes history
• Application installation history
• Application preferences
• GPS fix
• Wifi history
• iPhone configured email accounts

Click here to contact us or call 0845 612 8123