TGViewer
Elcomsoft Elcomsoft @elcomsoft · 548 subscribers
Post #612 1.95K
Exploring iPadOS, tvOS and audioOS 17 and 18 Devices: File System and Keychain Extraction🔈

The latest update to iOS Forensic Toolkit brought bootloader-level extraction to a bunch of old iPads, Apple TVs, and even the first-gen HomePod running OS versions 17 and 18. This enabled full file system and keychain extraction on a those older Apple devices that can still run these versions of the OS.

What’s new in the Elcomsoft iOS Forensic Toolkit 🖥

Speaking of iOS Forensic Toolkit 8.81, the update extends bootrom (checkm8) extraction to cover iPadOS, tvOS and audioOS builds from the latest major families (17 and 18) on a defined set of older devices, adding the ability to perform full file system dumps and decrypt the keychain.

More details in our article:
✍️https://blog.elcomsoft.com/2025/11/exploring-ipados-tvos-and-audioos-17-and-18-devices-file-system-and-keychain-extraction/

#EIFT #updating
  • ❤ 1
More from @elcomsoft
  1. Sep 24, 2026🆕Low-Level Extraction the Apple TV 4K 2nd Generation🆕 We’ve added bootloader-level low-l…
  2. Sep 23, 2026🆕Low-Level Extraction of the Apple Watch S4/S5🆕 iOS Forensic Toolkit 10.11 adds bootload…
  3. Sep 22, 2026IoT Forensics on the Rise: Extracting More Apple Watch, Apple TV and HomePod Models 📹 Sev…
  4. Sep 3, 2026🆕Elcomsoft Quick Triage 2.2: Timeline, file system snapshot, and a plugin engine🆕 Elcoms…
  5. Aug 27, 2026Elcomsoft System Recovery 8.38: Built-In BitLocker TPM Exploit Library, Browser Artefact E…
  6. Aug 24, 2026The True Meaning of Consent in ‘Consent Extractions’ ✅ In law enforcement use a “consent e…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →