There has been a lot of noise regarding GrayKey news recently. GrayKey is an excellent appliance for iOS data extraction. As always, the devil is in the detail.

A couple of quotes first, from the company who now partners with GrayShift to bundle their mobile forensic software (one of the best on the market) with GrayKey. They do support GrayKey-extracted data as well, and here is what they say:

“From the first iPhone extraction from GrayKey we were blown away with the amount of data they recovered”

Actually, this is not exactly the case. Speaking of full file system acquisition, it’s been us who were the first on the market some 3 years ago, see Physical Acquisition for 64-bit Devices, iOS 9 Support.

Since then, we’ve been actively developing and updating iOS Forensic Toolkit, adding support for newer versions of iOS. https://blog.elcomsoft.com/2019/02/technical-and-legal-implications-of-ios-file-system-acquisition/ #iosforensics #jailbreak #iphone