Ä«Ä«¿ÀÇ÷¯½ºÄ£±¸
 


ºñ¹Ð¹øÈ£ È®ÀÎ ´Ý±â


 
»óÇ° »ó¼¼ ¼³¸í
 
 
   ºê·£µå¼¥ > ElcomSoft Co.Ltd. > Elcomsoft iOS Forensic Toolkit
 
 
 
ÀÌÀü»óÇ° Elcomsoft iOS Forensic Toolkit ´ÙÀ½»óÇ°
 
 
 
Á¦Á¶È¸»ç : ElcomSoft Co.Ltd.
ÆǸŰ¡°Ý : 3,520,000¿ø (VAT Æ÷ÇÔ)
°ø±Þ¹æ½Ä : USB Dongle
¼ö·® EA
 
 
»óÇ° »ó¼¼ ¼³¸í
 
 
 

Extract critical evidence from Apple iOS devices in real time. Gain access to phone secrets including passwords and encryption keys, and decrypt the file system image with or without the original passcode. Physical and logical acquisition options for all 64-bit devices running all versions of iOS.


Perform full file system and logical acquisition of iPhone, iPad and iPod Touch devices. Image device file system, extract device secrets (passwords, encryption keys and protected data) and decrypt the file system image.

  • Full file system extraction and keychain decryption

  • Logical acquisition extracts backups, crash logs, media and shared files

  • Passcode unlock and physical acquisition for legacy devices

  • Extracts and decrypts protected keychain items

  • Repeatable, forensically sound extraction for select iPhone and iPad models through modified bootloader

  • Automatically disables screen lock for smooth, uninterrupted acquisition

Supports: all generations of iPhone, iPad, iPad Pro and iPod Touch, first-generation HomePod; Apple Watch and Apple TV 4 and 4K; all versions of iOS from iOS 3 to iOS 17


Compatible Devices and Platforms

iOS Forensic Toolkit supports advanced logical extraction, agent-based and bootloader-based low-level extraction methods.


Advanced logical extraction:

  • Supports all Apple iPhone, iPad, and iPod Touch models regardless of iOS version

  • Limited support for Apple Watch and Apple TV devices

  • Extended device information including list of installed apps

  • iTunes-format backup (includes many keychain items)

  • Media files and shared files, even if the backup is password-protected


Agent-based extraction:

  • Supports all Apple iPhone, iPad, and iPod Touch models subject to iOS version support

  • iOS/iPadOS 12.0 through 16.5.1 supported on compatible devices

  • For compatibility, please refer to the chart below

  • Extracts full file system image and keychain


Bootloader-level extraction:

  • For 64-bit devices, extracts full file system image and keychain

  • For legacy 32-bit devices, images and decrypts the data partition

  • iPhone 3G/3GS, 4, 4s, 5 and 5c: passcode unlock via DFU (macOS and Linux editions)

  • iPhone 3G/3GS, 4, 4s, 5 and 5c: physical acquisition with bit-precise imaging and keychain decryption (macOS edition only) (iPhone 4s support requires a Raspberry Pi Pico board) (macOS and Linux editions)

  • iPhone 3G/3GS, 4, 4s, 5, 5c, 5s, 6, 6s, SE, 7, 8, X, iPod Touch 5, 6, 7, iPad 2, 3, 4, 5, 6, 7, iPad Mini 1, 2, 3, 4, iPad Air 1, 2, iPad Pro 1, 2, Apple TV 3, 4, 4K, Apple Watch S0-S3: forensically sound bootloader-level extraction (macOS and Linux editions)

  • Partial file system & keychain acquisition for BFU, locked and disabled iPhone models ranging from the iPhone 5s through iPhone X

  • Apple TV 4 (cable connection) and Apple TV 4K (wireless connection through Xcode, Mac and Linux editions)

  • Apple Watch (checkm8 for Apple Watch S0-S3, limited logical extraction for Apple Watch S0 through S6); requires a third-party IBUS adapter; macOS and Linux editions

  • HomePod (first generation); full checkm8 extraction; requires a custom 3D-printable USB adapter (macOS and Linux editions)





 System requirements


Windows


Apple macOS

Linux

Windows 7/8/8.1/10/11

macOS 10.13 High Sierra
macOS 10.14 Mojave
macOS 10.15 Catalina
macOS 11 Big Sur
macOS 12 Monterey
macOS 13 Ventura
macOS 14 Sonoma

Debian
Ubuntu
Mint
Kali


The iOS Forensic Toolkit for Windows requires the latest version of iTunes installed. macOS version is not guaranteed to work on a virtual machine or Hackintosh. Certain features (e.g. physical acquisition for legacy 32-bit devices, agent installation using non-developer accounts, checkm8 acquisition) may not be available in certain editions; check compatibility table for details. The Linux edition supports Debian, Ubuntu, Kali Linux, and Mint, and requires additional dependencies.