OPENTEXT Tableau Forensic TX1 - Files Created During Mobile Backup Acquisition; Files Created During Ios Device Backup Acquisition

4.9.5 Files created during mobile backup acquisition
The files created by TX1 during a mobile backup acquisition job are different for
each of the device OS types that TX1 supports (iOS and Android). Even within a
given device type, the outputs are different between Native and Lx01 output types.
The following sections describe the mobile backup acquisition output files generated
by TX in these different scenarios.
4.9.5.1 Files created during iOS device backup acquisition
The output files generated by TX1 during backup acquisition of an iOS based mobile
device depend on the File output setting. The two options are Native and Lx01.
Native iOS backup acquisition job output files
Currently, the files created by an iOS mobile device during a Native file type backup
are written to the destination drive according to the following convention:
[image base directory]/
[directory name]/
[image name]/
[iOS backup folder name]
[iOS sub-folder name 1]
[iOS filename 1]
.
.
.
[iOS filename n]
[iOS sub-folder name 2]
.
.
.
[iOS sub-folder name n]
Info.plist
Manifest.db
Manifest.plist
Status.plist
[image name].csv
[image name].log.html
[image name].log.txt
[image base directory] is defined in Setting Defaults or when selecting a
destination drive/filesystem. The default is /tx1_images/.
[directory name] is the image sub-directory name auto-generated for each
acquisition and is defined in setting Defaults or when selecting a destination drive
during mobile backup acquisition job setup. The default setting is Date and Time.
[iOS backup folder name] is the base folder as provided by the iOS device which
contains all the backup content in its sub-folders and files. TX1 has no control over
the naming of this folder nor any of the folder/file names contained therein, and they
are subject to change at Apple’s discretion.
[image name].csv is the TX1 generated mobile backup acquisition job metadata file.
It contains the following information for each file acquired during the backup job:
• Path – The overall path name of the folder/file as written to the destination drive/
filesystem.
Chapter 4 Using TX1
162
OpenText™ Tableau™ Forensic TX1 Imager
ISTX240300-UGD-EN-1