References

References

Source of inspiration

• Sarah Edwards
• https://github.com/cheeky4n6monkey/iOS_sysdiagnose_forensic_scripts

Unified Logs

• https://www.blackbagtech.com/blog/accessing-unified-logs-image/
• https://github.com/ydkhatri/UnifiedLogReader
• https://www.mac4n6.com/blog/2016/11/13/new-macos-sierra-1012-forensic-artifacts-introducing-unified-logging

Mobile Installation

• https://dfir.pubpub.org/pub/e5xlbw88
• https://github.com/abrignoni/iOS-Mobile-Installation-Logs-Parser

Paper

• https://hackmd.io/lp-FAw70Q1mbXkd5iLNOPQ?view

Practical Cases:

• https://www.amnesty.org/en/latest/research/2021/07/forensic-methodology-report-how-to-catch-nso-groups-pegasus/

Network analysis

• https://developer.apple.com/documentation/network/recording_a_packet_trace

Other

• https://github.com/abrignoni/iLEAPP
• https://www.jessesquires.com/blog/how-to-sysdiagnose-ios/
• https://www.manpagez.com/man/1/sysdiagnose/
• https://www.apple.com/business/docs/site/iOS_Security_Guide.pdf
• https://developer.apple.com/bug-reporting/profiles-and-logs/
• https://iosninja.io/ipa-library
• https://github.com/RealityNet/iOS-Forensics-References

Tools

• https://docs.mvt.re/

Memory dump

*FRIDA + objection