IoT Forensics: Analysis of Ajax Systems' mobile app for the end user

Abstract

Security appliances that protect modern homes are ubiquitous IoT products. Due to their popularity, such appliances may witness incidents occurring to the IoT security systems they form. These systems are remotely configured and monitored by the end users through mobile applications. Ajax Systems is a manufacturer of such IoT devices which provides a variety of applications that allow remote configuration and monitoring of its products. Research regarding digital forensics of such applications is limited yet this unexplored piece of evidence may hide vital information for a number of investigative questions. In this paper the Ajax Systems' mobile application for the end user is thoroughly analyzed in both Android and iOS operating systems in pursue of evidentiary data that could reside within. Exploiting findings of this study authors developed a Python utility, namely Ajax Systems Log Parser, that can assist investigators with the examination of some of the artifacts found.