Analyzing third-party iOS apps: How to use the new reference guide poster

Channel	Publish Date	Thumbnail & View Count	Download Video
	Publish Date not found	0 Views	View on YouTube Download Video

Data leaks, theft, and privacy issues are common problems at DFIR. Third-party applications are often the cause of these types of data leaks and unwanted access. While privacy is always a concern, at DFIR we also rely on data from third-party applications to add context to the clues we discover. The new iOS Third Party Apps Analysis Reference Guide poster provides a list of the most interesting files and folders in the Data and Shared folders for the most commonly used third-party applications. This webcast explains how you can use the content of this poster to conduct real investigations and research. The presenter will also show live examples of analyzing third-party applications using test images.

Download the poster here: https://www.sans.org/u/1dMI

Speaker biography
Mattia Epifani

Today, Mattia is CEO of Reality Net System Solutions, an Italian infosec and digital forensics consulting company, where he works as an analyst and digital forensics expert for judges, prosecutors, lawyers and private companies, and occasionally appears as an expert witness in court.

Mattia also brings his passion and expertise to the classroom, serving as an instructor for SANS FOR500: Windows Forensic Analysis and FOR585: Smartphone Forensic Analysis In-Depth, a subject that is particularly close to his heart. "I spend my days acquiring and analyzing digital devices, especially smartphones," he says. As an expert with a vast knowledge of forensic investigation tools and techniques, Mattia always tries to find a way to achieve his goal even when tools aren't available. "I deal with forensics on a daily basis, testing, developing new methods and going deeper and deeper, and I love teaching my students real cases and scenarios," he says.

Mattia first came into contact with SANS as a student, attended the DFIR Summit in 2010 and then, because he liked the people and content at SANS so much, he completed a four-year apprenticeship before becoming an instructor.