iOS Location and Media Forensics | iOS Forensics 5

Welcome back, everyone! It's Matthew here with another deep dive into iOS forensics. In this video, we're going to explore media and location forensics on iOS devices. Specifically, we’ll focus on how to extract, analyze, and interpret data from photos, videos, and geolocation tags.

By the end of this tutorial, you’ll understand how media artifacts on iPhones (such as images and videos) store crucial metadata like timestamps and location data, and how these can be used in forensic investigations. We’ll also explore how iOS devices log location data via apps, such as Find My iPhone, Maps, and Location Services, and how you can use these logs to build accurate timelines.

What We'll Cover:
Extracting media files from an iOS device
Analyzing photo and video metadata (including EXIF data)
Using geotags to pinpoint locations of captured images and videos
Exploring location logs from Find My iPhone, Maps, and other apps
Understanding the forensic importance of location and media data for building timelines in investigations
Whether you're a forensic investigator, cybersecurity enthusiast, or just curious about iOS data, this video will provide valuable insights into the world of iOS media and location forensics.

CHAPTERS:
00:00 Intro
00:33 Media
03:10 Apple-Related Downloads - /private/var/mobile/Media/Downloads/
03:43 Media Analysis Database
04:43 Podcasts
06:45 Radio.db
08:18 Photos in DCIM Folder
11:58 Location Artifacts
14:54 Info on IP Addresses in Network Usage
16:22 Info on Location Data stored in Apps
17:04 Conclusion

Here are the links to the images I used:
iOS 15: https://drive.google.com/file/d/1Aq_E...
iOS 16: https://drive.google.com/drive/folder...

If you find this video helpful, don't forget to like, subscribe, and share to support the channel! Also, let me know in the comments if you'd like to see more videos on forensic techniques.