NEW350+ rooms now have a live terminal, so you can learn by typing the commands, right in your browser.Learn in a live terminal. 350+ rooms.Try a lab♥ Codelivly is 100% free, no paywall. If it helped you, chip in to keep it running.100% free. Help keep it so.Support us
[>_] ROOM · Forensics
iOS Artifact Analysis
Master iOS artifact analysis. Learn to extract and parse critical data from iOS backups, including SMS, call logs, app data, and location history.
Room tasks
1What Are iOS Artifacts and Why Do They Matter
2iOS File System & Sandbox Structure
3Analyzing iTunes/Finder Backups and plist Files
4Guided Lab: Parsing an iOS Backup for Evidence
Frequently Asked Questions
What is iOS forensics?
iOS forensics is the recovery and analysis of data from iPhones and iPads, such as messages, call history, location data and app content. Examiners often work from backups or full file system extractions.
Where are SMS messages stored on an iPhone?
Messages are kept in a SQLite database called sms.db within the device or backup. Examiners query it to read conversations, timestamps and attachments, including some deleted items.
Is this iOS forensics room free?
Yes. The iOS Artifact Analysis room on Codelivly is free and guides you through extracting and parsing backup data. It is rated intermediate and suits learners with basic forensic knowledge.