MOBILE FORENSICS
iMessage forensics
iMessage is Apple’s built-in messaging service and is often considered one of the most important sources of data in an iPhone investigation. Messages, attachments and metadata can – depending on the data set – provide valuable information for reconstructing communication patterns.
TECHNICAL BACKGROUND
Technical Fundamentals
Depending on the device, iOS version and backup method, the following artefacts, amongst others, can be examined:
- •News content
- •Times of transmission and reception
- •Attachments (images, videos, documents)
- •SQLite databases
- •Metadata
- •Information for participants
- •Synchronisation artefacts via iCloud
- •Relevant system and app logs
The information that is actually available depends on the data sources that are available.
OUR APPROACH
This is how your examination will be carried out
A transparent process – from the initial enquiry to the handover of the report.
TYPICAL QUESTIONS
When is this analysis required?
- ✔What messages were exchanged?
- ✔When were messages sent or received?
- ✔What appendices are included?
- ✔Is there any evidence of deleted communication data?
- ✔Which metadata can be objectively verified?
LIMITATIONS & CONCLUSION
What you should know
Not every message or attachment is permanently available. Deleted data, synchronisation statuses, encryption and the method of data backup all influence the scope of the information that can be analysed. Missing artefacts must not automatically be interpreted as evidence of a lack of communication.
iMessage forensics enables a structured analysis of the communication data stored on an Apple device. Its value lies in the comprehensive overview of all available artefacts.
CUSTOMER REVIEWS
What our customers say
4.8 out of 5 stars on Trustpilot · 54 reviews
“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”
idalein
Verified review on Trustpilot
“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”
Layla Pankratz
Verified review on Trustpilot
“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”
a woman from Cologne
Verified review on Trustpilot
Enquire now – free initial consultation
Would you like to have iMessage messages or attachments examined by professionals? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.
RELATED TOPICS
You might also be interested in
FREQUENTLY ASKED QUESTIONS
Frequently Asked Questions
Click on a question to see the answer.