Input Output + Syslog - Obtaining Data From Locked iOS Devices via Live Monitoring

Discover techniques for extracting significant data from locked iOS devices without requiring passwords or device unlocks in this 35-minute Black Hat conference talk. Learn how forensic examiners and iOS researchers can monitor raw data sent via USB protocol to recover important device information, even when it's not visible through iTunes or third-party software. Explore methods for iOS device monitoring, capturing relevant information, and live parsing of data. Gain insights into monitoring USB data and capturing live system logs, complete with case examples. Presented by Nicholas Dubois and Jessica Hyde, this talk reveals innovative approaches to iOS forensics that can be crucial for investigations and research.

Input Output + Syslog (iO+S): Obtaining Data From Locked iOS Devices via Live Monitoring