Practical Mobile Forensics
上QQ阅读APP看书,第一时间看更新

File system

To better understand the forensic process of an iPhone, it is good to know about the file system that is used. The file system used in the iPhone and other Apple iOS devices is HFSX, a variation of HFS Plus with one major difference. HFSX is case sensitive whereas HFS Plus is case insensitive. Other differences will be discussed later in this chapter. OS X uses HFS Plus by default and iOS uses HFSX.