Membership

iOS Social Media Forensics (W50)

Explore forensic analysis of social-media artifacts on iOS. Develop an understanding of the data sources and analysis methods that can support mobile investigations. Intended audience: Who is this course for? Anyone wanting to dive into mobile forensics.

Instructor · Kinga Kieczkowska

Modules:
4
Lessons:
43

eForensics learning

Practical skills.
Verified progress.

What you'll learn

  • Create or work with an iPhone backup image.
  • Extract data of interest using SQL and Python.
  • Interpret iOS social-media artifacts in context.

Prerequisites

An interest in digital forensics Basic familiarity with Python scripting (preferable) previous exposure to SQL Equipment and software: Text editor, e.g. Atom SQL database viewer – e.g. DB Browser for Sqlite You don’t need an iPhone to take this course If you wish to create your own iPhone backup, you will need a laptop with updated iTunes installed. However, this is not a prerequisite – you can participate in the course even if you don’t have access to an iPhone. An iPhone image will be provided.

Module 3

Module 2 Continued

  1. 1. (W50M10) Resources - Module 2 Part 2

  2. 2. (W50M11) SQLite CLI Intro

  3. 3. (W50M12) Facebook Messenger Forensics

  4. 4. (W50M13) Facebook Messenger - Practical

  5. 5. (W50M14) Facebook Forensics - Extra

  6. 6. Practice: (W50Q03T02)

  7. 7. Practice: (W50Q03T03)

  8. 8. Practice: (W50Q03T06)

  9. 9. Practice: (W50Q03T07)

  10. 10. Practice: (W50Q03T09)

  11. 11. Practice: (W50Q03T10)

  12. 12. (W50M15) Viber

  13. 13. Practice: (W50Q04T02)

  14. 14. (W50M17) Discord Forensics

Assessments

Quiz Required

(W50Q03) Module 2 Assignments - Continued

Assignment Required

(W50A02) SQLite CLI and Messenger - LAB

Quiz Required

(W50Q04) Viber Homework

Module 4

Module 3

  1. 1. (W50M18) Module 3 Resources and reading

  2. 2. (W50M19) What else?

  3. 3. (W50M20) What's next?

  4. 4. (W50M21) Final Exam Brief

  5. 5. Practice: (W50Q05T01)

  6. 6. Practice: (W50Q05T02)

  7. 7. Practice: (W50Q05T03)

  8. 8. Practice: (W50Q05T06)

  9. 9. Practice: (W50Q05T07)

  10. 10. Practice: (W50Q05T08)

  11. 11. Practice: (W50Q05T09)

  12. 12. Practice: (W50Q05T10)

  13. 13. Practice: (W50Q05T16)

  14. 14. Practice: (W50Q05T17)

  15. 15. Practice: (W50Q05T19)

  16. 16. Practice: (W50Q05T20)

  17. 17. Practice: (W50Q05T22)

  18. 18. Practice: (W50Q05T23)

  19. 19. Practice: (W50Q05T25)

  20. 20. Practice: (W50Q05T27)

Assessments

Quiz Required

(W50Q05) Final Exam

Assignment Required

(W50A00) Final exam - open questions

Course access

Unlock iOS Social Media Forensics (W50).

Enter your email. We’ll send a sign-in code here without taking you away from this course.