官术网_书友最值得收藏!

  • Practical Mobile Forensics
  • Rohit Tamma Oleg Skulkin Heather Mahalik Satish Bommisetty
  • 350字
  • 2021-06-24 16:39:08

Recovery mode

During the boot-up process, if one step is unable to load or verify the next step, then the boot-up is stopped and the iPhone displays the screen shown in the following screenshot:

iOS device recovery mode

This mode is known as recovery mode and is required to perform upgrades or restore the iPhone. To enter recovery mode, perform the following steps:

  1. Turn off the device.
  2. Hold down the iPhone Home button and connect the device to a computer via a USB cable. The device should turn on.
  3. Continue holding the Home button until the Connect to iTunes screen appears. Then, you can release the Home button (on a jailbroken iOS device, this screen may appear with different icons). Most forensic tools and extraction methods will alert you regarding the current state of the iOS device.
  4. To exit recovery mode, reboot the iPhone. On iPhone 6s and earlier, this can be completed by holding down the Home and Sleep/Power buttons until the Apple logo appears. On iPhone 7 and iPhone 7 Plus, this can be done by holding the Side button and Volume Down button together. On iPhone 8 and later, you do this by clicking the Volume Up button, then clicking the Volume Down button, and then holding down the Side button.
You can read more about recovery mode on iOS devices at https://support.apple.com/en-in/HT201263.

Normally, the process of rebooting returns the iPhone from recovery mode to normal mode. This same methodology applies to the Apple Watch. You may experience a situation where the iPhone constantly reboots into recovery mode. This is known as a recovery loop. A recovery loop may occur when the user or examiner attempts to jailbreak the iOS device and an error occurs. To get the device out of a recovery loop, the device must be connected to iTunes so that a backup can be restored to the device.

This makes changes to the evidence, so ensure that you have validated your acquisition methods on a test device prior to attempting to use your methods on real evidence.
主站蜘蛛池模板: 沽源县| 潼关县| 榕江县| 密云县| 崇明县| 四子王旗| 潼南县| 遂宁市| 嘉禾县| 三穗县| 舞阳县| 黑河市| 葵青区| 错那县| 吉林市| 马鞍山市| 深泽县| 定西市| 蓝山县| 翁牛特旗| 辛集市| 丽江市| 南昌市| 新兴县| 娄烦县| 湖北省| 乌鲁木齐市| 且末县| 无棣县| 禹城市| 息烽县| 行唐县| 婺源县| 嘉禾县| 和平县| 蒲城县| 临夏市| 托克逊县| 根河市| 阿尔山市| 张北县|