iOS devices have the ability to track everything the user
does – how many steps the user takes, where the user has
been, and keeps track of how they use their devices.
This presentation will dive into some of the protected
files that keep track of every detail of a user’s life that iOS
tracks. These databases and files can be used to correlate
user activity down to the smallest detail. Methods of
analysis as well as some scripts will be shown to help
analyze these files.

Sarah Edwards (@iamevltwin), Mac Nerd, Parsons
Corporation; Author & Instructor, FOR518, SANS Institute

Sarah Edwards

(@iamevltwin), Mac Nerd, Parsons Corporation, SANS Institute
Sarah Edwards is a senior digital forensic analyst who has worked with various federal law enforcement agencies. She has performed a variety of investigations including computer intrusions, criminal, counter-intelligence, counter-narcotic, and counter-terrorism. Sarah’s research and analytical interests include Mac forensics, mobile device forensics, digital profiling, and malware reverse engineering. Sarah has presented at many industry conferences including Shmoocon, CEIC, Bsides*, Defcon, and the SANS DFIR Summit. She has a Bachelor of Science in Information Technology
from Rochester Institute of Technology and a Masters information
Assurance from Capitol College.

свернуть