BDC - More Battery Temps & Charging Stats for iOS

Now that the CTF competitions for Magnet and MSAB summits are completed I can finally work on some new research that came from the evidence extractions.

I've dove head first into battery information in the past specifically on Android (here and here) but this go around there are some more indicators on iOS that I don't believe have been supported just yet from commercial tools.

Usually you can look for battery information in Powerlogs, Biomes, even some third party applications track battery status behind the scenes. This research (and accompanying parser) is pulled from the following iOS native path:

/private/var/db/Battery/BDC

Inside are a bunch of CSV files, the ones with the prepended "BDC_SBC" are the ones we are interested in. These are the only ones in this folder that actually include battery percentages and more easily discernible information. Lets take a peek at some of the headers of interest:

- TimeStamp - timestamp of the event

- CurrentCapacity - raw battery capacity (percentage)

- IsCharging - status of if the device is charging or not

- Temperature - phone temp calculated in C * 1000

- Amperage - amp usage in mA (negative is draining, positive is charging)

- Voltage - voltage usage in mV

- StateOfCharge - another battery percentage, this feeds the UI on the phone itself

- Watts - watts being input (can show slow or fast charging)

Because we have multiple files compiled over multiple dates ranges we can get a sense of some phone usage across a period of time.

We can show that the phone was charging at a certain timeframe as well as the speed at which it was charging. We can also show internal phone temperatures which could be useful for certain cases.

With this new parser we could have made quick work of the Toasty Phone question. Grab the latest version of iLEAPP which now includes the parser for this.