iOS 11 isn\\'t all fun and games. What we know so far and ways to handle unsupported data sets

  • Webcast Aired Wednesday, 08 Nov 2017 10:30AM EST (08 Nov 2017 15:30 UTC)
  • Speakers: Heather Mahalik, Domenica Crognale

This webcast will cover the latest SANS DFIR blog post \Time is NOT on our side when it comes to messages in iOS 11". SANS instructors Heather Mahalik and Domenica "Lee" Crognale will discuss iOS 11 messages and the differences they have seen compared to older iOS versions. They will walk you through their methods for testing and creating data sets for examination, as well as provide attendees with tips on how to better understand iOS 11 messages. Additionally, they will discuss procedures used for developing the query and how your mobile forensics tools might be blurring the lines on what the data represents.

Smartphones are constantly changing and the 'FOR585 course is forced to evolve. The course material has been updated to include 7 new labs, new sections and bonus material for students interested in smartphones that aren't common to all parts of the world, but really matter to some investigations. A glimpse of the new sections in 'FOR585 will be also provided in this webcast including, SQLite forensics, advanced third-party application parsing, recovering artifacts from deleted chat applications, Android Nougat, iOS 11 and more!