Course Curriculum

  • 01

    INTRODUCTION

    • Introduction
  • 02

    PLIST FILE FORMAT

    • Plist File Format

    • XML PList

    • Binary PList

    • Other “PList” Formats

    • Knowledge Check

  • 03

    NSKEY ARCHIVES

    • NSKeyedArchive

    • Navigating NSKey Archives
  • 04

    PLIST VIEWERS – OFFICIAL TOOLING

    • PList Viewers – Official Tooling

    • Xcode

    • PLutil: Convert Binary PList to XML

    • Converting with PLutil - Video

    • PList Viewers – Third-Party Tooling

    • Exploring NS Key Archives - Video

    • Forensic Tooling
  • 05

    PLIST ANALYSIS

    • iOS/MacOS Implications

    • BLOBs

    • iOS PList File Locations

    • Exemplar Lab Walkthrough - Video

    • PList Forensics Lab

    • PList Forensics Lab - Solutions

    • References

Learning Outcomes

After completing this course, you will learn the following:

  • To gain understanding of the PList file structure and different PList variants

  • To gain familiarity with common PList files on the iOS operating system

  • To gain understanding of the options available for examining PList files

Technical Requirements

For the hands-on labs in this course

  • QuickTime Installe

  • PList Explorer

  • plistEditor Pro

What is next at Cyber 5W?

Add your email to the mailing list to get the latest updates