Hello everyone! Matthew here, and in today’s video, we’ll be diving into the fascinating world of iOS Biome and ScreenTime forensics. If you're interested in how iOS tracks and stores user behavior data, then this video is for you.

In this tutorial, we’ll cover how to extract and analyze biome data, which logs detailed user activity such as app usage, steps taken, and other health-related data collected through the Health app. We'll also explore ScreenTime forensics, looking at how iOS logs usage habits, including app activity, website visits, and time limits, providing crucial data for forensic investigators. These insights can be incredibly valuable for timeline reconstructions and understanding a user’s digital behavior.

What You'll Learn:
Extracting iOS Biome Data: What biome data includes, and how to access it from an iOS device.
Analyzing Health and Activity Data: How health-related data like steps, distance, and other metrics are stored and accessed.
ScreenTime Data Overview: How iOS logs app usage, time spent on websites, and device unlocks.
Timeline Reconstruction Using Biome and ScreenTime Data: How to piece together user activity for forensic analysis.
Importance of Biome and ScreenTime Forensics in Investigations: How investigators use these logs to get insights into user habits, app usage, and location-related activities.
By the end of this video, you’ll have a solid understanding of how iOS captures and stores user behavior data, and how to use these tools to extract and analyze critical information for digital forensics or cybersecurity investigations.

Chapters:
00:00 Intro
00:42 Biome directory
02:51 Opening and analyzing SEGB Files
06:51 ScreenTime Request
07:40 UserFocusActivity
08:38 Backlight
10:50 Using ILEAPP
11:24 Apps installed
11:58 Connected WiFi networks
12:15 Now Playing
12:53 Safari history
13:36 ILEAPP Wrap up
14:50 iOS versions
15:46 Conclusion

Here are the links to the images I used:
iOS 15: [ Ссылка ]
iOS 16: [ Ссылка ]
If you enjoy the content, make sure to like, subscribe, and share to help grow the channel! Drop a comment below if you’d like to see more detailed tutorials on other iOS forensic techniques.

свернуть