HK_Dig4nsics

Overview One of the capabilities found in iOS devices is the Shortcuts application. This native application can be used to create shortcuts for different types of functionalities in the system. This article examines the homescreen of an iOS device after a shortcut to open a URL was created using the Shortcut application. The article also addresses artifacts indicating that a shortcut was used to accomplish a particular task in the system. The test shortcut created for this article opens a webpage, https://thisweekin4n6.com , using the Safari browser. Apple [1] describes the Shortcuts application as "a quick way to get one or more tasks done with your apps." Meaning that the Shrotcut application allows users to custom-create shortcuts capable of completing specific tasks when users activate them. Users are also able to have sutom names and icons for the shortcuts.    Creating Test Shortcut             As mentioned...

Introduction       Having multiple software and hardware tools while conducting mobile device forensics can assist examiners in overcoming any obstacles caused by operating systems updates, new data file formats, unsupported applications/operating system/device modules, and other issues that often arise while examining mobile devices. This research reviewed and tested a tool named 3uTools to determine its advantages and disadvantages for iOS device forensics. This research begins with reviewing the tool, which focuses extensively on utilities within the tool that could be of use for forensic examiners dealing with iOS devices. The testing phase of the research included utilizing 3uTools to extract data from iOS devices and other tests to determine the capabilities of the tool. The last part of the research was centered around the results of the data backups created by 3uTools and comparing them to a full filesystem extraction conducted using Cellebrite UFED. D...