The Most Unusual Things about iPhone Backups

In this article we tried to gather everything we know about iTunes backup passwords to help you break (or reset) their passwords in the most efficient way.

👉 https://blog.elcomsoft.com/2019/06/unusual-iphone-backups/

#iphone #crypto #mobileforensics #cloudforensics #elcomsoft #mobilesecurity #cloud #icloud #iOS #dataextraction

The Art of iPhone Acquisition

We all know how much important data is stored in modern smartphones, making them an excellent source of evidence. However, data preservation and acquisition are not as easy as they sound. There is no silver bullet or “fire and forget” solutions to solve cases or extract evidence on your behalf. In this article, which is loosely based on our three-day training program, we will describe the proper steps in the proper order to retain and extract as much data from the iPhone as theoretically possible.

The first steps: data preservation...

👉 https://blog.elcomsoft.com/2019/07/the-art-of-iphone-acquisition/

by Vladimir Katalov

#dfir #iphone #iOSforensics #mobile #cloud #dataextraction #digitalforensics #cybersecurity #elcomsoft #faradaybag

Extended Mobile Forensics: Analyzing Desktop Computers

When it comes to mobile forensics, experts are analyzing the smartphone itself with possible access to cloud data. However, extending the search to the user’s desktop and laptop computers may (and possibly will) help accessing information stored both in the physical smartphone and in the cloud. In this article we’ll list all relevant artefacts that can shed light to smartphone data.

👉 https://blog.elcomsoft.com/2019/07/extended-mobile-forensics-analyzing-desktop-computers/

#iphone #ios #mobileforensics #cloud #dfir #cloudexplorer #phone #smartphone #phonebreaker #icloud #password

New Elcomsoft Cloud Explorer 2.20 fixes Google Photos support, boosts the number of data types available for acquisition, speeds up Photos downloading speed, switches from Google Maps to OpenStreetMap for showing you the user’s location history.

👉 https://www.elcomsoft.com/news/723.html

#google #security #cloud #smartphone #android #photo #locationhistory #maps #onestreetmap #download

ElcomSoft Phone Breaker 9.40 is out with support for Skype chats, files and metadata

Elcomsoft Phone Breaker 9.40 adds support for Skype chats, media files, contact lists and metadata. The update enables experts to download conversation histories, pictures and files, while the updated Elcomsoft Phone Viewer can display downloaded data as well as metadata for deleted chats and files purged from Skype servers.

👉 https://www.elcomsoft.com/news/729.html

#skype #microsoft #dataextraction #dataprotection #security #chats #synced #contacts #mobileforensics #cloud #messages #conversations #deleteddata

Elcomsoft Cloud Explorer 2.25 fixes Google Account authentication for some accounts

Elcomsoft Cloud Explorer 2.25 is a maintenance release with minor bug fixes and a major change under the hood. The fix resolves authentication issues on some Google accounts with specific two-factor authentication settings. The brand-new authentication algorithm we have under the hood is significantly more robust than the one it replaces.

👉 https://www.elcomsoft.com/news/731.html

#Cloud #GoogleAccount #2FA #authentication

Cloudy Times: Extracting and Analyzing Location Evidence from Cloud Services

Geolocation data can provide a wealth of evidence to various government agencies. Law enforcement agencies use location data to help place suspects near a crime scene in a given time frame. However, the use of location is not limited to criminal or civil investigations. Emergency response services use geolocation to locate persons, taxi and delivery services use location to improve service. There are many more examples where location evidence is vital. Recently, governments have started using (or are considering using) geolocation data to help identify and isolate infected citizens. Where does the location evidence come from and how one can extract it?

by Oleg Afonin

👉 https://blog.elcomsoft.com/2020/04/cloudy-times-extracting-and-analyzing-location-evidence-from-cloud-services/

#cloud #locations #applehealth #googlefit #geolocation #maps #EXIFfiles #extractdata

iCloud Backups, Synced Data and End-to-End Encryption

Initially, iCloud backups were similar in content to local (iTunes) backups without the password. However, the introduction of iCloud sync has changed the rules of the game. With more types of data synchronized through iCloud as opposed to being backed up, the content of iCloud backups gets slimmed down as synchronized information is excluded from cloud backups, though still present in local backups.

Two-factor authentication (or lack thereof) affects what can and what cannot be synchronized. Sounds confusing? Let’s shed some light on the types of data that might be available in iCloud backups and how they are affected by the optional data sync.

👉 https://blog.elcomsoft.com/2020/06/icloud-backups-synced-data-and-end-to-end-encryption/

#ios #iphone #sync #backup #icloud #2fa #cloud

ElcomSoft Phone Breaker 9.60 and Elcomsoft Phone Viewer 5.10 streamline iCloud data analysis

Elcomsoft Phone Breaker 9.60 streamlines access to iCloud data, breaking down the 17 types of iCloud synced data, the content of iCloud Drive and iCloud backups, into three large groups. By accessing the categories via three distinct groups, experts will be able to save time by analyzing the available information faster.

👉 https://www.elcomsoft.com/news/750.html

#ios #iphone #cloud #mobilesecurity #mobileforensics #keychain #cybersecurity #itsecurity

iCloud Extraction Streamlined

Apple iCloud contains massive amounts of data, which may become highly valuable evidence. The oldest and most frequently mentioned are iCloud backups, which ElcomSoft were the first to extract back in 2012. A lot has changed since then. Today, iCloud backups account for a very minor part of the evidence available in iCloud. Learn what types of data are stored in iCloud, how Apple protects the data with end-to-end encryption, and how to access that valuable evidence with the updated Elcomsoft Phone Breaker.

👉 https://blog.elcomsoft.com/2020/06/icloud-extraction-streamlined/

#ios #iphone #sync #backup #icloud #2fa #cloud #dataextraction

iOS, watchOS and tvOS Acquisition Methods Compared: Compatibility Notes

How can you obtain the highest amount of data from an iPhone, iPad, Apple TV or Apple Watch? This is not as simple as it may seem. Multiple overlapping extraction methods exist, and some of them are limited to specific versions of the OS. Let’s go through them and summarize their availability and benefits.

👉 https://blog.elcomsoft.com/2020/06/ios-watchos-and-tvos-acquisition-methods-compared-compatibility-notes/

#iOS #tvOS #watchOS #mobilesecurity #dfir #mobileforensics #cloud #keychain #dataaccess