1 Table of Contents: “..., and incident response -- iPhone logical acquisition -- Logical data analysis -- Mac and Windows artifacts...”

2 Table of Contents: “... -- What Should I Do? -- Examining Initial Data -- Gathering and Reviewing Preliminary Evidence...”

3 Table of Contents: “...Intro -- Table of Contents -- About the Authors -- About the Technical Reviewer -- Acknowledgments...”

4 Table of Contents: “... -- Quick review -- Overview -- incident response -- Preparation and prevention -- Detection and analysis...”