Elcomsoft has updated its iOS Forensic Toolkit, enabling physical acquisition of certain iOS 5 and iOS 6 devices including iPhone 4s and 5, iPad 2 through 4, iPod Touch 4-5.

Acquisition of data from jailbroken devices is automated, eliminating previously required manual steps. The acquisition of legacy devices is now completely automated.

iOS Forensic Toolkit continues to provide unrestricted support for legacy iOS devices such as iPhone 4 and earlier. However, physical acquisition support for previous-generation iOS devices is subject to technical limitations. iPhone 4S and 5, iPad 2-4 can only be acquired if jailbroken or unlocked so that jailbreak code can be installed. Data cannot be acquired from non-jailbroken devices locked with an unknown passcode.

The passcode recovery speed on jailbroken iPhone 5 devices has been increased to 15.5 passcodes per second, allowing iOS Forensic Toolkit to break typical 4-digit passcodes in about
10 minutes.

Previous versions of iOS Forensic Toolkit already supported jailbroken iPhone 4S and iPad 2 and 3 models running iOS 5. However, iOS 6 implemented new security measures.

Windows and Mac OS X versions of Elcomsoft iOS Forensic Toolkit are available. Physical acquisition support for the various iOS devices varies depending on lock state, jailbreak state and the version of iOS installed.

Fulcrum Management www.fulcrum.net.au