20190813_dfirfit_pub.pdf

11bbd2ef9e6fb483ec997f4380a2b658?s=47 socketo
August 13, 2019

 20190813_dfirfit_pub.pdf

#DFIRFITをやる - Analyzing iOS HealthData -

11bbd2ef9e6fb483ec997f4380a2b658?s=128

socketo

August 13, 2019
Tweet

Transcript

  1. %'*3'*5Λ΍Δ "OBMZ[JOHJ04)FBMUI%BUB !TZT@TPDLFU

  2. ΞδΣϯμ w ࣗݾ঺հ w %'*3'*5ͱ͸ w J04%BUB"DRVJTJUJPO w J04ϔϧεέΞσʔλ෼ੳ w

    ͓ΘΓ
  3. ࣗݾ঺հ w ໊લ͚ͦͱ w 5XJUUFS!TZT@TPDLFU w ࢓ࣄ*P5ϖϯςετɺϑΥϨϯδοΫௐࠪͳͲ w #MPHIUUQTTPDLFUPIBUFOBCMPHKQ w

    %'*3$IBMMFOHFΛ΍ͬͨΓͯ͠·͢
  4. %'*3'*5

  5. %'*3'*5ͱ͸ w 5XJUUFSɺ*OTUBHSBNͰʮ%'*3'*5ʯݕࡧ w ༗໊ͳւ֎ͷϑΥϨϯδοΧʔͷํ΍%'*3ʹैࣄ͍ͯ͠Δํʑͷ
 ϑΟοτωε৘ใ

  6. %'*3'*5ͱ͸

  7. %'*3'*5PS#645

  8. %'*3'*5PS#645 w 4"/4%'*34VNNJUJO"VTUJOͰൃද͞Εͨ w ৄࡉ͸ҎԼ w 1SFTFOUBUJPO%'*3'*5PS#645@"'PSFOTJD&YQMPSBUJPOPGJ04 )FBMUI%BUB 4"/4%'*34VNNJU ŠNBDODPN


    IUUQTXXXNBDODPNCMPHQSFTFOUBUJPOEpSpUPS CVTUBGPSFOTJDFYQMPSBUJPOPGJPTIFBMUIEBUBTBOTEpSTVNNJU
  9. %'*3'*5PS#645 w IUUQTXXXZPVUVCFDPNXBUDI WU-ZK1S3EZ*

  10. J04%BUB"DRVJTJUJPO

  11. J04"DRVJTJUJPO w J1IPOFͷσʔλऔಘͷํ๏͸ओʹͭ w J5VOFT#BDLVQσʔλˡࠓճ͸ओʹ͜ΕΛ࢖༻ w +BJMCSFBL͔Βͷσʔλऔಘ w .PCJMF'PSFOTJDTπʔϧͷ࢖༻

  12. J5VOFT#BDLVQ͔Βͷऔಘɹ w J1IPOFΛJ5VOFTʹ઀ଓɺόοΫΞοϓͰʮ͜ͷίϯϐϡʔλʯΛબ୒
 ʮϩʔΧϧͷόοΫΞοϓΛ҉߸Խʯ͢Δ͜ͱͰϔϧεσʔλ΋
 όοΫΞοϓ͞ΕΔ
 
 
 


  13. +BJMCSFBL୺຤͔Βͷσʔλऔಘ w +BJMCSFBLͷख๏ͳͲ͸ׂѪ w +BJMCSFBL୺຤΁44)઀ଓ͕ग़དྷΔ͜ͱલఏ w EEίϚϯυ͕࢖͑Δ͕ɺݖݶपΓͰౖΒΕͯஅ೦ w QSJWBUFWBSԼͷϢʔβྖҬΛ44)ӽ͠ʹऔಘ͢Δ
 


    TTISPPU!<J1IPOF*1"EESFTT>bUBSDGQSJWBUFWBSbVTFSUBS
  14. J04ͷϔϧεέΞ w J04͔ΒೖͬͨʮϔϧεέΞʯ৘ใͳͲΛ؅ཧ͢Δ
 ΞϓϦ w αʔυύʔςΟΞϓϦͱͷ࿈ܞʹΑΓઁऔͨ͠৯ࣄͷ
 ৘ใɺਭ຾ͷ৘ใɺϫʔΫΞ΢τͷ৘ใͳͲΛ؅ཧ
 
 
 


  15. J04ͷΞΫςΟϏςΟ w "QQMF8BUDIͰͷϫʔΫΞ΢τ΍αʔυύʔςΟΞϓϦͷΞΫςΟϏςΟ
 
 
 
 
 
 
 


  16. J04ϔϧεέΞσʔλ GSPNJ5VOFT#BDLVQ w .BDɿ6TFS<6TFSOBNF>-JCSBSZ"QQMJDBUJPO4VQQPSU.PCJMF4ZOD#BDLVQ w 8JOEPXTɿa"QQ%BUBa3PBNJOHa"QQMF$PNQVUFSa.PCJMF4ZODa#BDLVQa

  17. J04ͷϔϧεέΞσʔλ GSPN+BJMCSFBL w QSJWBUFWBSNPCJMF-JCSBSZ)FBMUI  w 42-JUF%BUBCBTFͳͷͰී௨ʹʮ%##SPXTFSGPS42-JUFʯͰӾཡՄa w ʮIFBMUIEC@TFDVSFTRMJUFʯ͕ͳ͍ɺTIN XBM͸ଘࡏ͢Δ


    
 
 
 

  18. J04ϔϧεέΞσʔλ GSPNϔϧεέΞ w ʮϔϧεέΞʯΞϓϦͷΤΫεϙʔτػೳ w 9.-ܗࣜͰ%VNQ͞ΕΔ w FYQPSU@DEBYNM w ॻ͖ग़ͨ͠σʔλYNM

    w 9.-ܗࣜͳͷͰ9.-ύʔαͱ͔Ͱ৭ʑͰ͖Δ
 

  19. J04ϔϧεέΞσʔλͷղੳ

  20. ݕূ؀ڥ w J1IPOF9 J04  w "QQMF8BUDI4   w

    J5VOFT 7FSTJPO
  21. )FBMUI ͷσʔλ w ʮIFBMUIECTRMJUFʯ w σʔλιʔε σόΠεɺΞϓϦέʔγϣϯ ৘ใͳͲɺ؅ཧ৘ใ w ʮIFBMUIEC@TFDVSFTRMJUFʯ

    w ओͳϔϧεέΞσʔλɺϫʔΫΞ΢τ౳ͷେྔͷ৘ใ w ʮIFBMUIECTRMJUFʯʹϦϯΫ͞Ε͍ͯΔ
  22. IFBMUI@ECTRMJUF

  23. σʔλιʔε TPVSDF@EFWJDFT w ࠓ·Ͱ࢖༻͍ͯͨ͠σʔλιʔε͕ อଘ͞Ε͍ͯΔ w ιϑτ΢ΣΞߋ৽͝ͱʹ৽ͨʹ
 ιʔεσόΠεͱͯ͠ొ࿥͞Ε͍ͯΔ

  24. σʔλιʔε TPVSDFT αʔυύʔςΟͷΞϓϦ͕ιʔεʹͳ͍ͬͯΔ

  25. IFBMUIEC@TFDVSFTRMJUF w ςʔϒϧ͕ݸ΄Ͳ͋Γ݁ߏେ͖͍ w ஫໨ςʔϒϧ w BDUJWJUZ@DBDIFTΞΫςΟϏςΟʹؔ͢Δه࿥ w TBNQMFTEBUF@UZQF͝ͱͷ਺஋ه࿥ w

    RVBOUJUZ@TBNQMFTTBNQMFTͷ֤σʔλͷ௥Ճ৘ใ
  26. աڈҰ൪ಈ͍͍ͯͨ೔Λ୳͢ w ʮBDUJWJUZ@DBDIFTʯҠಈڑ཭΍า਺ͳͲͷΞΫςΟϏςΟʹؔ͢Δه࿥

  27. TBNQMFTͷओͳ%BUBUZQFT EBUB@UZQF JE ಺༰  ମॏ  ৺ഥ  า਺

     Ҡಈڑ཭ N  ҆੩࣌ফඅΤωϧΪʔ  ΞΫςΟϒΤωϧΪʔ  ্͕ͬͨ֊਺ ʙ ӫཆૉ
  28. શظؒͷମॏͷ૿ݮΛݟ͍ͨ 56 58 60 62 64 66 68 70 72

    2017/3/14 0:00 2017/4/14 0:00 2017/5/14 0:00 2017/6/14 0:00 2017/7/14 0:00 2017/8/14 0:00 2017/9/14 0:00 2017/10/14 0:00 2017/11/14 0:00 2017/12/14 0:00 2018/1/14 0:00 2018/2/14 0:00 2018/3/14 0:00 2018/4/14 0:00 2018/5/14 0:00 2018/6/14 0:00 2018/7/14 0:00 2018/8/14 0:00 2018/9/14 0:00 2018/10/14 0:00 2018/11/14 0:00 2018/12/14 0:00 2019/1/14 0:00 2019/2/14 0:00 2019/3/14 0:00 2019/4/14 0:00 2019/5/14 0:00 2019/6/14 0:00 2019/7/14 0:00 weight EBUF@UZQF͕ʮʯͷσʔλΛTBNQMFT RVBOUJUZ@TBNQMFT͔ΒҾͬுͬͯ͘Δ %#ͷߏ੒͑͞෼͔Ε͹ΞϓϦ্Ͱ͸ग़དྷͳ͍ղੳ͕Մೳ
  29. ऴΘΓͱࢀߟ৘ใ w %'*3'*5͍͖ͯ͠·͠ΐ͏ʂ w ൃలͱͯ͠͸ɺʮ%'*3PS#645ʯͷൃදͰ΋͋ͬͨΑ͏ ʹΞΫςΟϏςΟ৘ใ͔Β࣋ͪओ͕ͦͷ࣌ؒʹԿΛ΍͍ͬͯͨ ͷ͔ͳͲͷߦಈͷਪଌͳͲ͕Մೳʹ
 w ࢀߟ৘ใ w

    1SBDUJDBM.PCJMF'PSFOTJDT5IJSE&EJUJPO w NBDOIUUQTXXXNBDODPN w J04σόΠεϑΥϨϯδοΫೖ໳
 IUUQTPXMJOVYHJUIVCJPCMPHQPTU BO@JOUSPEVDUJPO@PG@JPT@GPSFOTJDT