Core

Created: 03.07.2023

This is about … .

https://www.theiphonewiki.com/wiki/AFC

Today, โ€œlogicalโ€ acquisition becomes โ€œextended logicalโ€ or โ€œadvanced logicalโ€, as it extracts not only the well-known iTunes-style backup but also media files (via the AFC protocol), which include photos, videos, music, and downloads, along with their metadata. All that works even if the backup is password-protected. In addition, this method helps extract crash and diagnostic logs, which are difficult to parse, yet can help to build the device usage timeline.[…] Finally, this method can also extract the shared files […] An Overview of iOS Extraction Methods by Oleg Afonin, eForensic Magazine, Feb 2023, p.30

References

Expand… An Overview of iOS Extraction Methods by Oleg Afonin, eForensic Magazine, Feb 2023