Fast iPhone forensic analysis with iLEAPP

iPhone forensic analysis can be complicated, but sometimes you need to quickly access some of the most common information. iOS Logs, Events, And Plists Parser (iLEAPP) is a fast iPhone forensic triage tool that will parse out some of the most common data sources and applications. It is free to use and easy to expand with your own modules written in Python. Thank you to all of our Patrons for sponsoring DFIR Science. Especially The Ranting Geek. Thank you so much! This video shows how to get started with iLEAPP if you already have a dump of iPhone data. iLEAPP is a simple way to start with iPhone forensics, but keep in mind that it is not as comprehensive as other tools. You may need to manually conduct an iPhone forensic analysis to pull out more information that iLEAPP cannot yet parse. 00:00 The Case 00:11 Getting iLEAPP 00:35 Install iLEAPP requirements 00:49 Run iLEAPP GUI 01:23 Review the iLEAPP report 01:49 Case-relevant artifacts 02:33 Limits of iLEAPP 02:47 Easily keep iLEAPP up to date 03:27 iLEAPP review https://bit.ly/2Ij9Ojc - 👍 Subscribe for weekly videos ❤️ Get early access and bonus content - https://www.patreon.com/dfirscience Links: * https://github.com/abrignoni/iLEAPP #DFIR #iPhone #iLEAPP #forensics 010001000100011001010011011000110110100101100101011011100110001101100101 Help make DFIR tutorials 👍 Subscribe → https://bit.ly/2Ij9Ojc 🛒 Shop → https://swag.dfir.science ❤️ Patreon → https://www.patreon.com/dfirscience 🕸️ Blog → https://DFIR.Science 🤖 Code → https://github.com/DFIRScience 🐦 Follow → https://www.twitter.com/DFIRScience 📰 DFIR Newsletter → https://bit.ly/DFIRNews 010100110111010101100010011100110110001101110010011010010110001001100101 Tools to help manage your YouTube Channel: https://www.tubebuddy.com/DFIRScience This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License. Please link back to the original video. If you want to use this video for commercial purposes, please contact us first. We would love to see what you are doing and will probably allow its use.