Ubiquity Forensics - Your iCloud and You presented at Defcon 2015

by Sarah Edwards,

Summary : Ubiquity or "Everything, Everywhere” - Apple uses this term describe iCloud related items and its availability across all devices. iCloud enables us to have our data synced with every Mac, iPhone, iPad, PC as well as accessible with your handy web browser. You can access your email, documents, contacts, browsing history, notes, keychains, photos, and more all with just a click of the mouse or a tap of the finger - on any device, all synced within seconds.
Much of this data gets cached on your devices, this presentation will explore the forensic artifacts related to this cached data. Where is the data stored; how to look at it; how is it synced; and what other sensitive information can be found that you may not have known existed!

Sarah Edwards: Sarah is an experienced digital forensic examiner who has worked with various federal law enforcement agencies. She has performed a variety of investigations including criminal, counter-intelligence, and counter-terrorism. Sarah has a BS in Information Technology from Rochester Institute of Technology (2004) and a MS in Information Assurance from Capitol College (2010). Sarah’s day job at Harris Corporation consists of working with federal law enforcement to investigate intrusion incidents.