pirate.moo's gitbook
  • 🏴‍☠️pirate.moo's gitbook
  • WEB
    • OWASP TOP 10
    • Notes
    • Lab Write-Ups
      • SQLi in WHERE clause
  • PENTESTING
    • CHECKLIST
    • REPORTING
    • SCRIPTS
  • EXPLOITATION
    • reverse shells
    • dns/subdomain
    • ssl
    • Handy cmds
    • VULNERABILITIES
      • Log4Shell
      • Dirty Pipe
      • Pwnkit
  • CTF
    • CTF Tools
  • CERTIFICATIONS
    • PNPT
    • CPTS
      • 1. Process
      • 2. Getting Started
      • 3. NMAP
      • 4. Footprinting
        • FTP
        • SNMP
        • SMB
        • NFS
        • MySQL/MSSQL
        • Oracle TNS
    • CPTS Machines
      • Nibbles
    • OSCP
    • ISC2-cc
      • 1. Security Principles
      • 2. Incident Response
      • 3. Access Control
      • 4. Network Security
      • 5. Security Operations
  • MOBILE
    • History
    • Forensics
  • MOOSINT
Powered by GitBook
On this page

Was this helpful?

Forensics

Mobile Write Blockers:

A device/tool used to prevent writing or modifying data on a mobile device, while allowing users to examine/retrieve information already there. It's commonly used in forensics and data recovery.

Write Protection: Ensures no data on the device is altered in any way and blocks any attempts to write new or modify data by providing read-only access. Write blockers come in hardware and software forms, but both basically intercept any write commands.

BlackLight: (Logical/FS) UFED 4PC: (Logical/FS/Physical/Non-Invasive/Invasive) Device Seizure: (Logical/FS/Physical/Non-Invasive/Invasive) EnCase: (Logical/FS/Physical Non-Invasive) Lantern: (Logical/FS/Physical Non-Invasive) MOBILedit Forensic: (Logical/FS) MPE+: (Logical/FS/Physical/Non-Invasive/Invasive) Oxygen: (Logical/FS/Physical/Non-Invasive/Invasive) Secure View: (Logical) XRY: (Logical/FS/Physical/Non-Invasive/Invasive) Open Source Tools: BitPim Autopsy Plist Editor Santoku: Suite for mobile investigations, malware analysis OSAF: Open Source Android Forensic Toolkit Malware analysis on Androids

iOS: iPBA2: iPhone-Backup-Analyzer-2: Can decode iPhone backups up to iOS 6.x

PreviousHistoryNextMOOSINT

Last updated 9 months ago

Page cover image