
No single tool on the market meets our stringent requirements on speed, compatibility and ease of use. Yet another “me too” forensic viewer? We looked hard for a tool we could recommend to our customers for viewing data decrypted or downloaded with Elcomsoft Phone Breaker. Finally, the tool implements access to deleted SMS and iMessages stored in iOS backups. In addition, the tool displays essential information about the device such as model name, serial number, date of last backup etc. Analyzing media files and EXIF tags can help obtain massive amounts of location data as well as other essential evidence.Įxplore the content of local and cloud backups produced by iOS, BlackBerry 10, Windows Phone 8 and Windows 10 Mobile devices! Elcomsoft Phone Viewer is a small, lightweight tool enabling read-only access to contacts, messages, call logs, notes and calendar data located in mobile backups. The last version of Elcomsoft Phone Breaker adds support for message attachments such as media files, documents and other files, while Elcomsoft Phone Viewer allows analyzing messages and attachments obtained from iCloud. Message Attachments in iCloud: Media Files and Documents Elcomsoft Phone Viewer is a lightweight and convenient tool to quickly analyze evidence found in the results of physical acquisition. Regardless of the tool performing physical acquisition (Elcomsoft iOS Forensic or third-party tools), the result of these efforts is always a TAR archive containing an image of the device’s file system.

Since the introduction of the iPhone 5s, Apple’s first 64-bit iPhone, physical acquisition is exclusively available via file system imaging. Elcomsoft Phone Breaker can remotely extract synced Health data from iOS devices from the user's iCloud account, while Elcomsoft Phone Viewer can help viewing and analyzing Health data.

Heartrate, sleeping habits, workouts, steps and walking routines are just a few things that come to mind speaking of Apple Health. Health data can become an essential piece of evidence.
