Feb. 1, 2024, 4:06 a.m. | /u/SwanNo4764

Computer Forensics www.reddit.com

I just imaged a phone that took 5 hours to complete. 4.5 hours into the collection it tells me to enter the iTunes backup password. As usual, the custodian has no clue what it is. Given how long the damn collection took, I just canceled the prompt and finished the collection. Is there anything I can do with that image without the password. I know you can disable the encryption but it requires a reset to factory settings which the …

backup can clue collection computerforensics custodian encrypted image itunes password phone prompt

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Senior Security Researcher - Linux MacOS EDR (Cortex)

@ Palo Alto Networks | Tel Aviv-Yafo, Israel

Sr. Manager, NetSec GTM Programs

@ Palo Alto Networks | Santa Clara, CA, United States

SOC Analyst I

@ Fortress Security Risk Management | Cleveland, OH, United States