Elcomsoft iOS Forensic Toolkit 8.32 (Mac) and 7.92 (Windows) fix agent-based extraction for A12+ devices running iOS 15.4 and 15.4.1. In addition, the new release adds support for iPod Touch (2nd gen) and iPhone 3G devices.
Elcomsoft iOS Forensic Toolkit received an update. Version 8.32 (Mac) and 7.92 (Windows) bring a bugfix for the low-level extraction agent, addressing a specific issue encountered during the extraction of iOS 15.4 and 15.4.1 devices powered by Apple A12 Bionic and newer chips.
Responding to user feedback, the toolkit now includes support for two legacy devices: the iPod Touch (2nd generation) and iPhone 3G running iOS 3 or later. This addition aims to cater to the demands of forensic experts who still need to process these older devices, and is available in iOS Forensic Toolkit 8.32 for Mac.
Agent-based extraction offers numerous benefits compared to other acquisition method. The agent does not make any changes to user data, offering the most forensically sound extraction among available acquisition methods.
With this update, Elcomsoft continues to prioritize the functionality and effectiveness of its iOS Forensic Toolkit, ensuring reliable and comprehensive extraction capabilities for a wide range of Apple devices.
Elcomsoft iOS Forensic Toolkit provides forensic access to encrypted information stored in a wide range of Apple devices running most versions of iOS, iPadOS, watchOS, and tvOS. The tool supports file system imaging and keychain extraction from the latest generations of iOS devices. By performing low-level extraction of the device, the Toolkit offers instant access to all protected information including texts and emails, call history, contacts and organizer data, Web browsing history, accounts and settings, stored authentication credentials, encryption keys, logins and passwords, geolocation history, conversations carried over all instant messaging apps including secure chats, as well as all application-specific data saved in the device.
iOS Forensic Toolkit 8.32 release notes:
iOS Forensic Toolkit 7.92 release notes: