Originally published by Elcomsoft. Access to encrypted information can be gained through various methods, including live system analysis (1 and 2), using bootable forensic tools, analysis of sleep/hibernation files, and exploiting TPM vulnerabilities, with password recovery being the last option on the list. Each method has different resource requirements and should be used in order of least resource-intensive to most time-consuming, with password recovery as a last resort. Familiarize yourself with encryption recovery strategies and learn about data formats with weak protection or known vulnerabilities.

Originally published by Elcomsoft. The extraction method or methods available for a particular iOS device depending on the device’s hardware platform and the installed version of iOS. In this guide, we’ll discuss the applicable acquisition methods as well as the order in which they should be used.

Originally published by Elcomsoft. Apple iCloud can store cloud backups and media files, synchronize essential information between Apple devices and securely synchronize sensitive information such as Health and authentication credentials. This article will explain what kinds of data are stored in iCloud and what you need to access them.

Originally published by Elcomsoft. iOS Forensic Toolkit 8.0 is officially released! Delivering forensically sound checkm8 extraction and a new command-line-driven user experience, the new release becomes the most sophisticated mobile forensic tool we’ve released to date.

Originally published by Elcomsoft. Elcomsoft iOS Forensic Toolkit 7.60 extends agent-based extraction support all the way up to iOS 15.3.1 on Apple A11-A15 and M1 devices. The new release delivers full file system extraction for iOS 15.2 through 15.3.1, while still offering file system and keychain extraction support for all earlier versions of iOS.

Originally published by Elcomsoft. iOS Forensic Toolkit 7.60 brings gapless low-level extraction support for several iOS versions from iOS 15.2 up to and including iOS 15.3.1, adding full file system extraction support for Apple devices based on Apple A11-A15 and M1 chips.

Originally published by Elcomsoft. Modern versions of Windows have many different types of accounts. Local Windows accounts, Microsoft accounts, and domain accounts feature different types of protection. There is also Windows Hello with PIN codes, which are protected differently from everything else. How secure are these types of passwords, and how can you break them?

Originally published by Elcomsoft. iOS Forensic Toolkit 7.60 brings gapless low-level extraction support for several iOS versions from iOS 15.2 up to and including iOS 15.3.1, adding full file system extraction support for Apple devices based on Apple A11-A15 and M1 chips.

Originally published by Elcomsoft. Mobile forensics is not limited to phones and tablets. Many types of other gadgets, including IoT devices, contain tons of valuable data. Such devices include smart watches, media players, routers, smart home devices, and so on. In this article, we will cover the extraction of an Apple TV 4K, one of the most popular digital media players.

Originally published by Elcomsoft. This article continues the series of publications aimed to help experts specify and build economical and power-efficient workstations for password recovery workloads. Electricity costs, long-term reliability and warranty coverage must be considered when building a password recovery workstation. In this article we will review the most common cooling solutions found in today’s GPUs, and compare consumer-grade video cards with their much lesser known professional counterparts.

Originally published by Elcomsoft. Along with the version of iOS/watchOS/iPadOS, the SoC is one of the deciding factors that affects the data extraction paths available in each case. Read this article to better understand your options for each generation of Apple platforms.

Originally published by Elcomsoft. iOS Forensic Toolkit 7.10 brings low-level file system extraction support for a bunch of iOS versions. This includes the entire range of iPhone models based on the A11, A12, and A13 Bionic platforms running iOS 14.4 through 14.8.

Originally published by Elcomsoft: Is surveillance a good or a bad thing? The answer depends on whom you ask. In this article we’ll cover a very unorthodox aspect of real-time surveillance: iCloud.

Many are looking for a one-click solution for mobile extractions and data decryption. Elcomsoft is going to make your life a notch more complex by introducing a new iCloud authentication option you’ve never heard of before.