In order to get news and product updates properly and in time subscribe to ElcomSoft Newsletter by filling out the form 👉 https://www.elcomsoft.com/subscribe.html 👈😎 #dfir #mobileforensics #cloudforensics #computerfirensics #decryption #cyber

Achtung! 😎

Meet with us at GPEC Digital 2019, stand #D02 in CityCube Berlin, Messe Berlin, Germany, 13-14 March.

Come and learn our news! The expo is open for visitors from national and international security authorities 👮‍♂️

👉 https://www.elcomsoft.com/events.html

#police #cyber #cybersecurity #digitalforensics #cloudforensics #decryption

We strive to deliver products of the best quality for desktop, mobile and cloud forensics. Vote for us and make us happy!

Vote for us at the Forensic 4:cast Awards. Nominate ElcomSoft in categories:
» DFIR Commercial Tool of the Year - Elcomsoft Phone Breaker
» DFIR Blog of the Year - Elcomsoft Blog
» DFIR Team of the Year - ELCOMSOFT

👉 https://forensic4cast.com/forensic-4cast-awards/

#digitalforensics #dfir #phonebreaker #jailbreak #rootlessjb #mobileforensics #cloudforensics #elcomsoft

Elcomsoft Explorer for WhatsApp 2.70 supports iOS 12, new Google Drive backups, gains the ability to use one-time codes delivered via an SMS or generated offline from the device Settings app. In addition, the processing time of encrypted iTunes backups is cut 4 to 5 times.

👉 https://www.elcomsoft.com/news/718.html

#whatsapp #googledrive #sms #mobileforensics #cloudforensics #backup #encryption #authentication

Forensic Implications of iOS Jailbreaking

Jailbreaking is used by the forensic community to access the file system of iOS devices, perform physical extraction and decrypt device secrets. Jailbreaking the device is one of the most straightforward ways to gain low-level access to many types of evidence not available with any other extraction methods.

In this article we’ll talk about the risks and consequences of using various jailbreak tools and installation methods.

👉 https://blog.elcomsoft.com/2019/06/forensic-implications-of-ios-jailbreaking/

#jb #jailbreaking #cryptography #encryption #dfir #mobileforensics #cloudforensics #dataextraction #iphone #cybersecurity #jailbreak

The Most Unusual Things about iPhone Backups

In this article we tried to gather everything we know about iTunes backup passwords to help you break (or reset) their passwords in the most efficient way.

👉 https://blog.elcomsoft.com/2019/06/unusual-iphone-backups/

#iphone #crypto #mobileforensics #cloudforensics #elcomsoft #mobilesecurity #cloud #icloud #iOS #dataextraction

Digital Forensics: Training Required

If you are working in the area of digital forensics, you might have wondered about one particular thing in the marketing of many forensic solutions. While most manufacturers are claiming that their tools are easy to use and to learn, those very same manufacturers offer training courses with prices often exceeding the cost of the actual tools. Are these trainings necessary at all if the tools are as easy to use as the marketing claims?

We believe so. A “digital” investigation is not something you can “fire and forget” by connecting a phone to a PC, running your favorite tool and pushing the button. Dealing with encrypted media, the most straightforward approach of brute-forcing your way is not always the best.

by Oleg Afonin
👉 https://blog.elcomsoft.com/2019/06/digital-forensics-training-required/

#police #cyber #cybersecurity #digitalforensics #cloudforensics #decryption #mobileforensics #training #elcomsoft

Elcomsoft Phone Breaker 9.20 extracts Screen Time passwords and Voice Memos from iCloud

Elcomsoft Phone Breaker 9.20 expands the list of supported data categories, adding iOS Screen Time and Voice Memos. Screen Time passwords and some additional information can be extracted from iCloud along with other synchronized data, while Voice Memos can be extracted from local and cloud backups and iCloud synchronized data.

Elcomsoft Phone Breaker and Elcomsoft Phone Viewer are updated with support for two additional data categories. Users of EPB 9.20 and EPV 4.70 can now extract and analyze audio recordings made with Apple’s Voice Memos app. In addition, the tools allow extracting and analyzing Screen Time passwords as well as certain additional data.

👉 https://www.elcomsoft.com/news/726.html

#iphone #ios #icloud #screentime #password #passcode #voicememo #audiorecording #mobileforensics #cloudforensics

ElcomSoft Phone Breaker 9.30 is out with new iCloud engine, low-level iCloud Drive access, iOS 13.2 and macOS Catalina support

Elcomsoft Phone Breaker 9.30 delivers a new iCloud downloading engine and low-level access to iCloud Drive data. Thanks to the new iCloud engine, the tool can download backups produced by devices running all versions of iOS up to iOS 13.2. The new and improved iCloud downloading engine, the new iCloud Drive analysis core and the many bug fixes make EPB 9.30 a highly recommended update.

👉 https://www.elcomsoft.com/news/727.html

#iphone #ios #icloud #screentime #password #passcode #voicememo #audiorecording #mobileforensics #cloudforensics

VOTE FOR US ! 🙌

In our blog, we endeavour to highlight the most interesting facts and publish the results of our research. We cordially invite you to support us and nominate our blog in the following categories:

DFIR Blog of the Year:
*Elcomsoft Blog*

DFIR Article of the Year:
*‘The Worst Mistakes in iOS Forensics’*

*Voting is live until May 15, 2020!*

Vote here 👉 https://forensic4cast.com/forensic-4cast-awards/2020-forensic-4cast-awards/

#blog #blogger #vote #elcomsoft #mobileforensics #cloudforensics #computerforensics #decryption #itsecurity #software #cybersecurity #bestoftheday #nomination

Hey Dude, Where Is My iCloud Data?

by Vladimir Katalov

For more than ten years, we’ve been exploring iPhone backups, both local and iCloud, and we know a lot about them. Let’s reveal some secrets about the different types of backups and how they compare to each other.

👉 https://blog.elcomsoft.com/2021/05/hey-dude-where-is-my-icloud-data/

#icloud #cloudforensics #phonebreaker

iOS 15 Forensic Implications: Temporary iCloud Backups

One of the main problems of iCloud forensics (unknown account passwords aside) is the sporadic nature of cloud backups. Experts often find out that a given user either does not have device backups in their iCloud account at all, or only has a very old backup. This happens primarily because of Apple’s policy of only granting 5GB of storage to the users of the free tier. While users can purchase additional storage for mere 99 cents a months, very few do so. iCloud Photos, downloads and other data quickly fill up the allotted storage space, leaving no space for a fresh cloud backup.

👉 https://blog.elcomsoft.com/2021/08/ios-15-forensic-implications-temporary-icloud-backups/

#ios #mobileforensics #icloud #cloudforensics #iphone

Cloud Forensics: the New Reality

The majority of mobile devices today are encrypted throughout, making extractions difficult or even impossible for major platforms. Traditional attack vectors are becoming a thing of the past with encryption being moved into dedicated security chips, and encryption keys generated on first unlock based on the user’s screen lock passwords. Cloud forensics is a great alternative, often returning as much or even more data compared to what is stored on the device itself.

👉 https://blog.elcomsoft.com/2021/09/cloud-forensics-the-new-reality/

#icloud #iphone #cloudforensics #iossecurity #mobileforensics

ElcomSoft Phone Breaker 10 adds device-based iCloud authentication

Elcomsoft Phone Breaker 10 adds the ability to use a trusted iOS device to authenticate iCloud extraction. Every type of data becomes extractable including end-to-end encrypted data, and no password is required.

👉 https://www.elcomsoft.com/news/795.html

#ios #dfir #cloudforensics #2fa #cloudsecurity

iCloud Extractions Without Passwords and Tokens: When a Trusted Device is Enough

A lot of folks (and even some law enforcement experts) are looking for a one-click solution for mobile extractions and data decryption. Unfortunately, in today’s day and age there are no ‘silver bullet’ solutions. In the days of high-tech mobile devices and end-to-end encryption one must clearly understand the available options, and plan their actions accordingly. The time of ‘snake oil’ exploits is long gone. The modern world of mobile forensics is complex, and your actions will depend on a lot of factors. Today, we’re going to make your life a notch more complex by introducing a new iCloud authentication option you’ve never heard of before.

👉 https://blog.elcomsoft.com/2021/10/icloud-extractions-without-passwords-and-tokens-when-a-trusted-device-is-enough/

#ios #icloud #2fa #dfir #cloudsecurity #cloudforensics

Apple Watch Forensics: More on Adapters

If you are doing Apple Watch forensics, I’ve got some bad news for you. The latest model of Apple Watch, the Series 7, does not have a hidden diagnostics port anymore, which was replaced with a wireless 60.5GHz module (and the corresponding dock, which is nowhere to be found). What does that mean for the mobile forensics, and does it make the extraction more difficult? Let’s shed some light on it.

👉 https://blog.elcomsoft.com/2021/11/apple-watch-forensics-more-on-adapters/

#applewatch #ios #cloudsecurity #cloudforensics

Elcomsoft Phone Breaker 10.1: bugfix and maintenance release

Elcomsoft Phone Breaker 10.1 fixes bugs and improves compatibility, adding support for macOS 12 Monterey and the ability to extract Apple Maps data from end-to-end encrypted containers.

👉 https://www.elcomsoft.com/news/801.html

#icloud #applemaps #monterey #cloudforensics #dfir #epb

Cloud Forensics: Obtaining iCloud Backups, Media Files and Synchronized Data

Apple offers by far the most sophisticated solution for backing up, restoring, transferring and synchronizing data across devices belonging to the company’s ecosystem. Apple iCloud can store cloud backups and media files, synchronize essential information between Apple devices, and keep highly sensitive information such as Health and authentication credentials securely synchronized. In this article we’ll explain what kinds of data are stored in iCloud and what you need to access them.

👉 https://blog.elcomsoft.com/2022/11/cloud-forensics-obtaining-icloud-backups-media-files-and-synchronized-data/

#cloudforensics #PhoneBreaker #EPB #iCloud #backup #iOS #dfir

Apple iCloud Acquisition: A Lifeline for Forensic Experts

Acquiring data from locked, broken, or inaccessible devices poses significant challenges. However, there are ways to retrieve valuable information from such devices by obtaining the data from iCloud, including old data that has been deleted with no chance of recovery. In this article, we will explore the classic acquisition methods available for iOS devices and focus on the crucial role of Apple iCloud in forensic investigations.

👉 https://blog.elcomsoft.com/2023/07/apple-icloud-acquisition-a-lifeline-for-forensic-experts/

#AdvancedDataProtection #cloudforensics #digitalevidence #EPB #iCloud