The browser state is maintained in the BrowserState.db database, and the information that it contains allows the device user to exit or suspend Mobile Safari and return to it at a later time with the browser in the same or similar state. A case for OpenText EnCase solutions Using OpenText EnCase software, including OpenText EnCase Forensic, OpenText EnCase Endpoint Investigator, OpenText EnCase Mobile Investigator and EnCase EnScript programs, the last state of Mobile Safari from an iphone or ipad can be examined. This white paper shares specific examples of the type of information that can be extracted from Mobile Safari using OpenText EnCase software for DFIR investigations. The introduction of the private browsing functionality in ios 5 gave users the ability to conceal their browsing activity. Mobile Safari has been the default web browser for both iphone and ipad since the initial release of iphone OS. This has an obvious impact on investigating the internet activity of the user and is no different on a mobile device. While the effectiveness of private browsing varies from browser to browser, at the very least it limits the recording and retention of searches and other browsing activity in the history databases. The general browsing history provides some insight, but private internet browsing can be more enlightening, revealing activity an individual wanted to keep hidden. 1 White paper Examining mobile devices: Identifying private internet browsing activity in Mobile Safari Discover how uncovering private internet browsing activity in Mobile Safari is an important part of any digital forensics and incident response (DFIR) investigation and how this information can be examined and extracted using OpenText EnCase software.Ģ Contents Executive summary 3 A case for OpenText EnCase solutions 3 Database examination 4 Database tabs 5 Tab sessions 6 Examination with EnScript 6 Plist parsing 9 BrowserState.db Parser EnScript program 11 Summary 12 2/12ģ Executive summary Internet browsing activity is an important part of any digital forensics and incident response (DFIR) investigation.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |