Input Output + Syslog (iO+S): Obtaining Data From Locked iOS Devices via Live Monitoring

Forensic examiners and iOS researchers alike greatly depend on the availability to unlock a mobile device to enable data extraction. This presentation reveals how significant data can be recovered from iOS devices without the need for a password or device unlock.
Important device information can be identified through the monitoring of raw data sent via USB protocol. iOS devices present sensitive information in the back end even when this information is not seen by iTunes and third-party software. The presentation demonstrates numerous techniques to facilitate iOS device monitoring and capture of relevant information including live parsing of the data. Attendees will learn how to monitor USB data and capture live system logs including case examples....
By: Nicholas Dubois , Jessica Hyde
Full Abstract and Presentation Materials: www.blackhat.c...