Skip to content

iTunes backup protocol

Definition

Apple's proprietary protocol for transferring device data to a computer. Used by forensic tools to conduct logical acquisition of iOS devices; backup files are stored in a structured format and may be encrypted with a user-set password.

Related terms

AFC (Apple File Conduit)
The iOS service that exposes the media partition for file transfer during synchronisation. In standard form it only surfaces the media partition;...
Android Debug Bridge (ADB)
A command-line tool included in the Android SDK that allows communication with an Android device over USB or Wi-Fi. Used for logical...
File-system extraction
A deeper form of extraction that retrieves the full accessible directory tree by mounting the file system or using a privileged API...
Logical acquisition
An extraction method that uses the device's own operating system interfaces, such as iTunes backup or Android Debug Bridge, to export the...
Trust relationship (iOS)
The pairing between an iOS device and a computer established when the user taps 'Trust' after connecting. A forensic logical or file-system...

Explained in

  • Logical and File-System AcquisitionApple's proprietary protocol for transferring device data to a computer. Used by forensic tools to conduct logical acquisition of iOS devices; backup files are...

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.