Day: June 20, 2018

#5 – iTunes Backups Continued

comment 1
Digital Forensics / Smartphone Forensics

Ideally, your workstation should be free of previous user and client data when you begin your collections. This is not always possible when you are at a client site and requested to image multiple devices. If you can, image the devices to an encrypted external drive or an encrypted file/partition. The big caveat to this is when you are using iTunes as your collection method, which saves the backups to its default location. On Windows, […]