Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20112

Mobile Phone Forensics: Recovering deleted iMessages from iPhone5? Spotlight sees it

$
0
0
Spotlight maintains a separate index of SMS messages. I can't remember if the this file comes down on a backup or whether you'll need a more "physical" extraction, but the file (SQLite database, naturally) should be in: Code:: mobile/Library/Spotlight/com.apple.MobileSMS You get the message text, and sometimes a date. You don't get a straight phone number, but there's a field which contains identifiers which you might be able to reconcile with the SMS database.

Viewing all articles
Browse latest Browse all 20112