File-system extraction
Definition
A deeper form of extraction that retrieves the full accessible directory tree by mounting the file system or using a privileged API layer, yielding app containers and cache files beyond the backup API scope but still excluding unallocated sectors.
Related terms
- AFC (Apple File Conduit)
- The iOS service that exposes the media partition for file transfer during synchronisation. In standard form it only surfaces the media partition;...
- Android Debug Bridge (ADB)
- A command-line tool included in the Android SDK that allows communication with an Android device over USB or Wi-Fi. Used for logical...
- iTunes backup protocol
- Apple's proprietary protocol for transferring device data to a computer. Used by forensic tools to conduct logical acquisition of iOS devices; backup...
- Logical acquisition
- An extraction method that uses the device's own operating system interfaces, such as iTunes backup or Android Debug Bridge, to export the...
- Trust relationship (iOS)
- The pairing between an iOS device and a computer established when the user taps 'Trust' after connecting. A forensic logical or file-system...
Explained in
- Logical and File-System AcquisitionA deeper form of extraction that retrieves the full accessible directory tree by mounting the file system or using a privileged API layer, yielding app contain...