#6 – iTunes Backup Status.plist

comment 1
Digital Forensics / Smartphone Forensics

Yesterday I mentioned there were a few plists and a database in the root of the backup folder. I explained the Info.plist, but today wanted to explain the Status.plist.


In some scenarios, you will only have a limited amount of time with a device, and you want to ensure you have everything you need. This plist is a quick way to check. The Status.plist will display if a backup has fully completed, if it is a full backup, and the date the backup was created.

What does it mean when IsFullBackup is NO? In Day #3’s post, I mentioned there were options to encrypt an iTunes backup. When this is not selected (i.e. you do not encrypt the backup), the IsFullBackup will be set to NO. When you do choose to encrypt the backup, the IsFullBackup will be set to YES.

1 Comment

  1. Pingback: Week 25 – 2018 – This Week In 4n6

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s