There has been a lot of noise regarding GrayKey news recently. GrayKey is an excellent appliance for iOS data extraction. As always, the devil is in the detail.
A couple of quotes first, from the company who now partners with GrayShift to bundle their mobile forensic software (one of the best on the market) with GrayKey. They do support GrayKey-extracted data as well, and here is what they say:
“From the first iPhone extraction from GrayKey we were blown away with the amount of data they recovered”
Actually, this is not exactly the case. Speaking of full file system acquisition, it’s been us who were the first on the market some 3 years ago, see Physical Acquisition for 64-bit Devices, iOS 9 Support.
Since then, we’ve been actively developing and updating iOS Forensic Toolkit, adding support for newer versions of iOS. https://blog.elcomsoft.com/2019/02/technical-and-legal-implications-of-ios-file-system-acquisition/ #iosforensics #jailbreak #iphone
A couple of quotes first, from the company who now partners with GrayShift to bundle their mobile forensic software (one of the best on the market) with GrayKey. They do support GrayKey-extracted data as well, and here is what they say:
“From the first iPhone extraction from GrayKey we were blown away with the amount of data they recovered”
Actually, this is not exactly the case. Speaking of full file system acquisition, it’s been us who were the first on the market some 3 years ago, see Physical Acquisition for 64-bit Devices, iOS 9 Support.
Since then, we’ve been actively developing and updating iOS Forensic Toolkit, adding support for newer versions of iOS. https://blog.elcomsoft.com/2019/02/technical-and-legal-implications-of-ios-file-system-acquisition/ #iosforensics #jailbreak #iphone
Apple TV and Apple Watch Forensics 01: Acquisition
While the iPhone is Apple’s bread and butter product, is not the only device produced by the company. We’ve got the Mac (in desktop and laptop variations), the complete range of tablets (the iPad line, which is arguably the best tablet range on the market), the music device (HomePod), the wearable (Apple Watch), and the Apple TV. In today’s article, we are going to cover data extraction from Apple TV and Apple Watch. They do contain tons of valuable data, and are often the only source of evidence.
👉 https://blog.elcomsoft.com/2019/06/apple-tv-and-apple-watch-forensics-01-acquisition/
#iphone #iwatch #appletv #iosforensics #encryption #mobileforensics #evidence #digitalevidence #mobilesecurity
While the iPhone is Apple’s bread and butter product, is not the only device produced by the company. We’ve got the Mac (in desktop and laptop variations), the complete range of tablets (the iPad line, which is arguably the best tablet range on the market), the music device (HomePod), the wearable (Apple Watch), and the Apple TV. In today’s article, we are going to cover data extraction from Apple TV and Apple Watch. They do contain tons of valuable data, and are often the only source of evidence.
👉 https://blog.elcomsoft.com/2019/06/apple-tv-and-apple-watch-forensics-01-acquisition/
#iphone #iwatch #appletv #iosforensics #encryption #mobileforensics #evidence #digitalevidence #mobilesecurity
Apple Watch Forensics 02: Analysis
During the years, starting from 2015, Apple manufactured five different models with WatchOS, a wearable OS based on iOS and specifically developed for the Apple Watch.
Since then, not a lot of research was done on how to extract data from this kind of devices. I have been working on this topic over the last months, by researching methods on how to extract and analyze data stored on the internal memory of the Apple Watch.
by Mattia Epifani
👉https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
#iphone #iwatch #appletv #iosforensics #encryption #mobileforensics #evidence #digitalevidence #mobilesecurity #dataanalysis
During the years, starting from 2015, Apple manufactured five different models with WatchOS, a wearable OS based on iOS and specifically developed for the Apple Watch.
Since then, not a lot of research was done on how to extract data from this kind of devices. I have been working on this topic over the last months, by researching methods on how to extract and analyze data stored on the internal memory of the Apple Watch.
by Mattia Epifani
👉https://blog.elcomsoft.com/2019/06/apple-watch-forensics-02-analysis/
#iphone #iwatch #appletv #iosforensics #encryption #mobileforensics #evidence #digitalevidence #mobilesecurity #dataanalysis
The Art of iPhone Acquisition
We all know how much important data is stored in modern smartphones, making them an excellent source of evidence. However, data preservation and acquisition are not as easy as they sound. There is no silver bullet or “fire and forget” solutions to solve cases or extract evidence on your behalf. In this article, which is loosely based on our three-day training program, we will describe the proper steps in the proper order to retain and extract as much data from the iPhone as theoretically possible.
The first steps: data preservation...
👉 https://blog.elcomsoft.com/2019/07/the-art-of-iphone-acquisition/
by Vladimir Katalov
#dfir #iphone #iOSforensics #mobile #cloud #dataextraction #digitalforensics #cybersecurity #elcomsoft #faradaybag
We all know how much important data is stored in modern smartphones, making them an excellent source of evidence. However, data preservation and acquisition are not as easy as they sound. There is no silver bullet or “fire and forget” solutions to solve cases or extract evidence on your behalf. In this article, which is loosely based on our three-day training program, we will describe the proper steps in the proper order to retain and extract as much data from the iPhone as theoretically possible.
The first steps: data preservation...
👉 https://blog.elcomsoft.com/2019/07/the-art-of-iphone-acquisition/
by Vladimir Katalov
#dfir #iphone #iOSforensics #mobile #cloud #dataextraction #digitalforensics #cybersecurity #elcomsoft #faradaybag
Jailbreaking Apple TV 4K
Is jailbreaking an Apple TV worth it? If you are working in the forensics, it definitely is. When connected to the user’s Apple account with full iCloud access, the Apple TV synchronizes a lot of data. That data may contain important evidence, and sometimes may even help access other iCloud data. I have some great news for the forensic crowd: the Apple TV does not have a passcode. And some bad news: jailbreaking is not as easy and straightforward as we’d like it to be. Let’s have a look at what can be done.
The hidden Lightning port
Big surprise: the Apple TV 4K does have the port for wired connections, and the port is…
👉 https://blog.elcomsoft.com/2020/06/jailbreaking-apple-tv-4k/
#ios #appletv #checkra1n #jailbreak #iosforensics #dfir
Is jailbreaking an Apple TV worth it? If you are working in the forensics, it definitely is. When connected to the user’s Apple account with full iCloud access, the Apple TV synchronizes a lot of data. That data may contain important evidence, and sometimes may even help access other iCloud data. I have some great news for the forensic crowd: the Apple TV does not have a passcode. And some bad news: jailbreaking is not as easy and straightforward as we’d like it to be. Let’s have a look at what can be done.
The hidden Lightning port
Big surprise: the Apple TV 4K does have the port for wired connections, and the port is…
👉 https://blog.elcomsoft.com/2020/06/jailbreaking-apple-tv-4k/
#ios #appletv #checkra1n #jailbreak #iosforensics #dfir