Elcomsoft

The iPhone Upgrade: How to Back Up and Restore iOS Devices Without Losing Data

In just a few weeks, the new iPhone range will be released. Millions of users all over the world will upgrade, migrating their data from old devices. While Apple has an ingenious backup system in place, it has quite a few things behind the scenes that can make the migration not go as smooth as planned. How do you do the migration properly not to lose anything?

👉 https://blog.elcomsoft.com/2021/08/the-iphone-upgrade-how-to-back-up-and-restore-ios-devices-without-losing-data/

#iphone #mobileforensics #backup

Instant Messengers: Authentication Methods and Instant Password Extraction

iMessage, Hangouts, Skype, Telegram, Signal, WhatsApp are familiar, while PalTalk, Pigin, Psi Jabber client, Gadu-Gadu, Gajim, Trillian, BigAnt or Brosix are relatively little known. The tools from the first group are not only more popular but infinitely more secure compared to the tools from the second group. In this publication we’ll review the authentication methods used by the various instant messengers, and attempt to extract a password to the user’s account.

👉 https://blog.elcomsoft.com/2021/08/instant-messengers-authentication-methods-and-instant-password-extraction/

#mobileforensics #messengers

iOS 15 Forensic Implications: Temporary iCloud Backups

One of the main problems of iCloud forensics (unknown account passwords aside) is the sporadic nature of cloud backups. Experts often find out that a given user either does not have device backups in their iCloud account at all, or only has a very old backup. This happens primarily because of Apple’s policy of only granting 5GB of storage to the users of the free tier. While users can purchase additional storage for mere 99 cents a months, very few do so. iCloud Photos, downloads and other data quickly fill up the allotted storage space, leaving no space for a fresh cloud backup.

👉 https://blog.elcomsoft.com/2021/08/ios-15-forensic-implications-temporary-icloud-backups/

#ios #mobileforensics #icloud #cloudforensics #iphone

NAS Forensics: TrueNAS Encryption Overview

Established NAS manufacturers often offer some kind of encryption to their users. While anyone can use “military-grade AES-256 encryption”, the implementation details vary greatly. Synology, Asustor, and TerraMaster implement folder-based encryption, while QNAP, Thecus, and Asustor (MyAcrhive) employ full-disk encryption; the full comparison is available here. In this article, we’ll have a look at encryption methods used in TrueNAS, a system commonly used by computer enthusiasts for building custom NAS servers.

👉https://blog.elcomsoft.com/2021/08/nas-forensics-truenas-encryption-overview/

#nas #truenas #encryption

Apple Watch Forensics: The Adapters

How do you extract an Apple Watch? While several methods are available, none of them will work if you want to access the device directly without an adapter. There are several different options available on the market, some of them costing north of $200. We tested a large number of such adapters. How do they stand to the marketing claims? In this article, I will share my experience with these adapters.

👉 https://blog.elcomsoft.com/2021/08/apple-watch-forensics-the-adapters/

#applewatch #mobileforensics #dfir #iosforensictoolkit

iOS Privacy Protection Tools: Encrypted DNS, iOS 15 Private Relay, Proxy, VPN and TOR

Protecting one’s online privacy is becoming increasingly more important. With ISPs selling their customers’ usage data left and right, and various apps, mail and Web trackers contributing to the pool of “anonymized” data, de-anonimyzation becomes possible with big data analysis. This was clearly demonstrated with the recent event.

Apple did an attempt protecting their users’ location by introducing approximate locations in iOS 14. That change alone makes analyzing aggregate data from iPhone users more difficult but not impossible. In this publication, we compare the tools to protect one’s privacy online while using Apple iOS devices and desktop computers by making one’s browsing activities inaccessible to the middleman.

👉 https://blog.elcomsoft.com/2021/07/ios-privacy-protection-tools-encrypted-dns-ios-15-private-relay-proxy-vpn-and-tor/

#ios #vpn #privacy

Updated Elcomsoft iOS Forensic Toolkit Simplifies macOS Installs, Fixes Corrupted File System Extraction

While we are still working on the new version of Elcomsoft iOS Forensic Toolkit featuring forensically sound and nearly 100% compatible checkm8 extraction, an intermediate update is available with two minor yet important improvements. The update makes it easier to install the tool on macOS computers, and introduces a new agent extraction option.

👉 https://blog.elcomsoft.com/2021/07/updated-elcomsoft-ios-forensic-toolkit-simplifies-macos-installs-fixes-corrupted-file-system-extraction/

#ios #mobileforensics #macOS #filesystem

iOS Forensic Toolkit 7.02 simplifies macOS installations, fixes corrupted file system extraction

Elcomsoft iOS Forensic Toolkit 7.02 is a minor update making it easier to install the tool on macOS computers and introducing a new agent extraction option to fix the extraction of corrupted file systems.

👉 https://www.elcomsoft.com/news/791.html

#ios #mobileforensics #macOS #filesystem

Elcomsoft Phone Viewer 5.31 update previews OneDrive deleted files metadata

Elcomsoft Phone Viewer gains the ability to preview metadata for files deleted from OneDrive prior to restoring the files. In addition, the update fixes the issue with Skype attachments.

👉 https://www.elcomsoft.com/news/790.html

#onedrive #phoneviewer #mobileforensics

How to Remove Restrictions from Adobe PDF Files

Have you got an Adobe PDF file that you can open but cannot edit, print or copy selected text to the clipboard? There is an easy solution: with just a couple of clicks, the file can be unprotected. Bad news: you’ll need software. Good news: we’ve built one for you.

👉 https://blog.elcomsoft.com/2021/07/how-to-remove-restrictions-from-adobe-pdf-files/

#pdf #adobe #apdfpr #PDFRestrictions

Elcomsoft System Recovery Simplifies Digital Field Triage and In-Field Investigations

Elcomsoft System Recovery is a perfect tool for digital field triage, enabling safer and more secure in-field investigations of live computers by booting from a dedicated USB media instead of using the installed OS. The recent update added a host of features to the already great tool, making it easier to examine the file system and extract passwords from the target computer.

👉 https://blog.elcomsoft.com/2021/06/elcomsoft-system-recovery-simplifies-digital-field-triage-and-in-field-investigations/

#passwords #dfir #cybersecurity #datasecurity #passwordrecovery #digitalforensics

Elcomsoft System Recovery update simplifies digital field triage

Elcomsoft System Recovery, a digital field triage tool, receives an update. The tool adds the ability to extract Wi-Fi passwords and helps identify the owner of the computer being examined by extracting its Windows license key. In addition, file system analysis is made easier with an embedded two-panel file manager.

📝 Release notes (PDF)

👉 https://www.elcomsoft.com/news/789.html

#esr #wifipassword #licensekey #dfir #digitalforensics #encryption #windows

Analyzing Microsoft Timeline, OneDrive and Personal Vault Files

Elcomsoft Phone Breaker is not just about Apple iCloud data. It can also download the data from other cloud services including Microsoft accounts. In this new version, we have added support for even more types of data, including Windows 10 Timeline, Account Activity (logins to the account), OneDrive files, recent OneDrive files history, and files from Microsoft Personal Vault. Learn about these data types and how they can help advance your investigation.

👉 https://blog.elcomsoft.com/2021/06/analyzing-microsoft-timeline-onedrive-and-personal-vault-files/

#cloudsecurity #onedrive #personalvault #microsofttimeline #phonebreaker

ElcomSoft adds OneDrive, Microsoft Timeline extraction

Elcomsoft Phone Breaker 9.70 extends support for Microsoft account extraction, adding the ability to download OneDrive files and activities from the Windows 10 Timeline. Elcomsoft Phone Viewer is also updated to support new data types extracted from Microsoft accounts, and resolves a number of previously reported issues.

👉 https://www.elcomsoft.com/news/788.html

#mobileforensics #onedrive #personalvault #windowstimeline #phonebreaker