官术网_书友最值得收藏!

  • Practical Mobile Forensics
  • Rohit Tamma Oleg Skulkin Heather Mahalik Satish Bommisetty
  • 350字
  • 2021-06-24 16:39:08

Recovery mode

During the boot-up process, if one step is unable to load or verify the next step, then the boot-up is stopped and the iPhone displays the screen shown in the following screenshot:

iOS device recovery mode

This mode is known as recovery mode and is required to perform upgrades or restore the iPhone. To enter recovery mode, perform the following steps:

  1. Turn off the device.
  2. Hold down the iPhone Home button and connect the device to a computer via a USB cable. The device should turn on.
  3. Continue holding the Home button until the Connect to iTunes screen appears. Then, you can release the Home button (on a jailbroken iOS device, this screen may appear with different icons). Most forensic tools and extraction methods will alert you regarding the current state of the iOS device.
  4. To exit recovery mode, reboot the iPhone. On iPhone 6s and earlier, this can be completed by holding down the Home and Sleep/Power buttons until the Apple logo appears. On iPhone 7 and iPhone 7 Plus, this can be done by holding the Side button and Volume Down button together. On iPhone 8 and later, you do this by clicking the Volume Up button, then clicking the Volume Down button, and then holding down the Side button.
You can read more about recovery mode on iOS devices at https://support.apple.com/en-in/HT201263.

Normally, the process of rebooting returns the iPhone from recovery mode to normal mode. This same methodology applies to the Apple Watch. You may experience a situation where the iPhone constantly reboots into recovery mode. This is known as a recovery loop. A recovery loop may occur when the user or examiner attempts to jailbreak the iOS device and an error occurs. To get the device out of a recovery loop, the device must be connected to iTunes so that a backup can be restored to the device.

This makes changes to the evidence, so ensure that you have validated your acquisition methods on a test device prior to attempting to use your methods on real evidence.
主站蜘蛛池模板: 隆安县| 文安县| 济源市| 三亚市| 宁波市| 仁怀市| 建德市| 玉龙| 峨眉山市| 文水县| 邵阳县| 马公市| 永州市| 门头沟区| 威宁| 拜泉县| 祥云县| 呼伦贝尔市| 永嘉县| 霍城县| 衡南县| 和田市| 思茅市| 科技| 卓资县| 柳江县| 米易县| 鄄城县| 临洮县| 阿坝| 金塔县| 怀安县| 双江| 阳曲县| 静海县| 鲜城| 宁海县| 黑龙江省| 涞源县| 南昌县| 宝兴县|