iOS Forensic Analysis: for iPhone, iPad, and iPod touch (Books for Professionals by Professionals) 1st ed. Edition

In purchasing this book, my hope was to acquire a solid reference for the inner workings of Apple's iOS. My expectations were based upon other "good" forensics books in my collection, e.g., Brian Carrier's  File System Forensic Analysis , Harlan Carvey's  Windows Forensic Analysis DVD Toolkit, Second Edition , etc.While not a complete waste, the content in this book was disappointing from a technical expert's point of view and provides little original content. In place of a thorough and detailed set of explanations and references, the author has compiled a large selection of (mostly public) knowledge into a single collection. While a good compilation is not without value, most readers capable of performing computer forensics are also capable of finding wikipedia pages and reading manuals. I'd prefer to be told how it works, not how to "pull the levers and turn the knobs" on packaged software.The author also seems uncomfortable at the raw, technical level-- evident by short, choppy sentences and incomplete explanations.Alternatively, the chapter dealing with the features and functionality of the author's software product is well polished and thorough.If you can find a used version of the book, I'd say go for it. Have a hard time saying it's worth paying full price.

This book is an invaluable tool to the digital forensic examiner. Sean Morrissey presents everything in an understandable format, and unlike many similar textbooks, it is an enjoyable read. If you are just starting out in forensics, or are already a practitioner, then I fully recommend it.

Maybe this kind of work requires a deep thinker and I could barely follow what was being said. You know how your brain gives up and has to back up a couple pages?

I've read many forensics books over the last decade and written one as well. I believe that iOS Forensic Analysis (IFA) offers some useful information, but the manner in which the author presents it is not as effective as it could be. If the author were to write a second edition that structures the material in the way I recommend, I believe it would merit a four or five star review.My primary issue with IFA is the author's ability to relate to his audience. Forensics books need to identify the audience and cater to its needs. Some books are expressly written for newbies, while others are intended specifically for advanced practitioners. I got the sense that the author designed IFA for a wide audience with little familiarity with iOS. Unfortunately, I don't think he presents his material in a way best suited for that crowd.For example, if the author assumes the reader is not familiar with iOS, he is probably writing for a fairly nontechnical reader who may not have ever used an iPhone. I'm thinking of the "cop on the beat" who becomes the county "forensics expert" because he or she can create pivot tables in Excel. I've read several books aimed at this demographic, and the best ones take the following approach. First they explain the goal of the investigation. Next they explain the technology, applications, and their relevance. Finally they describe how to acquire and perhaps analyze evidence.While I could tell IFA attempted to meet these goals, I don't believe the final product is as helpful as it could be. For example, on p 84 the author mentions "lockdown certificates," which mean absolutely nothing to the sort of person I expect to read IFA. The term appears again on pp 212-214, but I'm sure the lower end audience would still be puzzled by this concept. I'm not saying "dumb down" the book, but rather carefully explain material as it is introduced.Elsewhere I thought IFA included discussions with little to no relevance to iOS forensics. The Digital Rights Management section in ch 8 is one example. The "network forensics" material in ch 10 provided no real benefit either.Overall, as mentioned by other reviewers, there is valuable material in IFA. However, the reader will need to know what he or she is looking for and be able to relate it to a case. I hope to see a second edition of IFA or one of the other iOS forensics books arriving soon to be a better introduction for readers.

THis book does an awesome job of taking you through the iOS file system and explaining how the iOS and the iPhone work, from the inside, out.