Digital Forensics Analysis of iMazing Phone Explorer Tool to Aid Mobile Forensics Investigation

Apple devices continue to lead the smart device industry, with over 2.2 billion active devices worldwide. These devices, including iPhones and iPads, store extensive personally identifiable information (PII), making them vital in digital forensic investigations. This study specifically examines the retrieval and analysis of PII from an iPhone and an iPad using iMazing software as the sole forensic tool. Data acquisition was conducted via a Lightning-to-VSB-A connection without jailbreaking, focusing on two distinct scenarios-one for each device-restricting access to user-space data. The analysis uncovered a range of forensic artifacts, including iCloud-synced SSID data, message logs, Wi-Fi security protocols, and other critical digital traces. Extracted data appeared in multiple formats, such as text files, CSV files, and plist files, providing forensic investigators with valuable insights. While this study is limited to iMazing, its findings highlight the potential and limitations of third-party tools in mobile forensics. By leveraging iMazing's capabilities, this research contributes to the evolving field of mobile device forensics, reinforcing the role of Apple devices in enhancing digital investigative methodologies.