Member-only story
iOS Forensics Tryhackme Walkthrough
Room link: https://tryhackme.com/room/malstrings
Note: This room is for Premium Members Only. who purchased THM premium membership.
Task 2. What is Digital Forensics and how is it Used Today?
Question 1. What would look more suspicious? an empty hard drive or a full hard drive?
Answer: an empty hard drive
Question 2. What is the definition for an abstract view of a hard drive?
Answer: image
Task 6. Data Acquisition & Trust Certificates
Question 1. What is the name of a forensics tool that couldn’t be used in a court of law, because data could be written to the device being analysed?
Answer: iFunbox
Question 2. You’ve found an iPhone with no passcode lock, what acquisition method would you use?
Answer: direct Acquisition
Question 3. What is the name of the certificate that gets stored on a computer when it becomes trusted?
Answer: trust certificate
