zylj1
offers a handy interface for viewing info extracted from native and cloud backups of gadgets working Apple iOS, BlackBerry 10 and Home windows Telephone 8, 8.1 and Home windows Cellular 10. With it, you possibly can view person contacts, learn messages, view name logs, notes and calendar knowledge, analyze customers’ on-line actions. When working with the backup of those gadgets working Apple iOS utilizing Elcomsoft Telephone Viewer, you possibly can view deleted messages – SMS and iMessage.
View knowledge from cloud storage.
Elcomsoft Telephone Viewer is optimized to work along with different firm merchandise. So, with the assistance of Elcomsoft Telephone Breaker, you possibly can rapidly extract primary info from Apple iCloud cloud storage. You’ll be able to view the extracted info utilizing Elcomsoft Telephone Viewer. Utilizing the 2 merchandise collectively can velocity up investigations and make it simpler to extract and analyze person knowledge, together with name and message historical past, telephone books and map coordinates.
View knowledge synced with iCloud
Synced ones go into iCloud with minimal delay and no matter key backups. This knowledge is out there even when iCloud backups are turned off. With Elcomsoft Telephone Viewer, you possibly can view the synchronized knowledge obtained with Elcomsoft Telephone Breaker. It helps viewing knowledge equivalent to synchronized name logs, contacts, calendars, notes, bookmarks and person exercise historical past within the Safari browser, together with deleted entries.
Safari browser historical past from synchronized knowledge is retrieved and displayed over a protracted time period. Extra info is retrieved than is out there on the system itself and its native copies. There’s a filter to view deleted entries. The next knowledge varieties can be found for viewing:
• SMS and iMessage messages synced with iCloud, together with hooked up images, media recordsdata and paperwork
• Consumer well being and exercise knowledge from the Apple Well being app
• Safari browser (historical past, bookmarks, open tabs)
• Calendars, notes, contacts
• Detailed name historical past
• Apple Maps (routes, search queries, marked objects)
• Wi-Fi (entry level info, MAC addresses, date and system added by)
• Pockets (besides fee playing cards)
• Details about the person (handle, telephones, identify) and their gadgets (together with serial numbers and OS model)
Bodily Knowledge Extraction: Viewing File System Photos
Because the launch of the iPhone 5s, the primary Apple system to make use of a 64-bit processor, the method and consequence of bodily knowledge acquisition has modified dramatically. If for 32-bit fashions (iPhone 5c and older) it was attainable to take away and decrypt the entire knowledge partition picture, then for 64-bit fashions geared up with the Safe Enclave safety subsystem, solely copying is feasible of the file system.
Recording a file system picture with an correct recreation of file paths and listing construction is carried out within the Elcomsoft iOS Forensic Toolkit for Cellular Forensics. The command is processed by the system itself utilizing the iOS working system. The results of the work is a picture of the file system, packaged in an archive in TAR format. Third-party options work in the same manner, producing the very same picture in the identical format. With Elcomsoft Telephone Viewer, you possibly can view and analyze the contents of an iOS file system picture packaged as a TAR archive.
Knowledge export
Elcomsoft Telephone Viewer lets you export knowledge obtained from iOS gadgets in Microsoft Excel format. Knowledge is exported from native and cloud iOS backups, knowledge synced from the iCloud cloud, and knowledge from file system photographs obtained from bodily evaluation of iPhone and iPad gadgets. The person’s location historical past is saved in KML format. With knowledge export assist, specialists can proceed to work with collected info utilizing third-party instruments and in style forensic evaluation packages.
Pace and compactness
Elcomsoft Telephone Viewer is quick, compact and simple to make use of. Excessive velocity, small set up measurement, easy and intuitive interface distinguish Elcomsoft Telephone Viewer from the “monster” merchandise of the trade, providing “all-in-one” packages, which require highly effective tools and particular programs for efficient use. In comparison with most forensic evaluation packages, Elcomsoft Telephone Viewer compares favorably in worth, measurement, ease of use, and no coaching required.
Entry to iOS notifications
Notifications are an vital a part of iOS. Notifications come from e mail clients, prompt messaging apps, banks and on-line shops, ticket reserving, supply and taxi companies; from boards and social networks. A person can obtain dozens and a whole bunch of notifications every single day, a lot of which stay unread. All unread notifications that haven’t been deleted by the person find yourself in iOS backups each within the iCloud “cloud” and in native ones created utilizing iTunes. Notifications could also be backed up for as much as a number of years. Their evaluation could present lacking info vital to the investigation. Elcomsoft Telephone Viewer lets you view and export software notifications from cloud and native backup.
Knowledge search and filtering
Elcomsoft Telephone Viewer is ideally fitted to quick processing of huge volumes of knowledge. Elcomsoft Telephone Viewer makes it straightforward to seek out the information and messages you want utilizing full textual content search or knowledge filtering.
Search and filters work in actual time and supply fast outcomes. Full-text search is supported for all knowledge fields, together with the message physique. Filtering operate is out there for contacts, notes, name historical past and messages. With the assistance of a filter, you possibly can show information that match inside a sure time interval, belong to a sure account or include a sure mixture of characters in any of the accessible fields. For calls and messages, show modes can be found for all recordings, incoming solely or outgoing solely.
Evaluation of person actions on the Web
Analyzing person exercise – their search queries, net pages seen and browser tabs opened – is a necessary a part of any investigation. With the assistance of the evaluation of search questions, no crime was solved, however proof of visits to sure sources – an vital a part of the proof base in quite a few investigations.
Utilizing Elcomsoft Telephone Viewer, you possibly can analyze the person’s search historical past, looking historical past, bookmark listing, in addition to a listing of browser tabs, together with thumbnails of open pages. This mode is out there for iOS (cloud and native) and BlackBerry 10 backups.
Pictures and movies
Beginning with the second model of the product, Elcomsoft Telephone Viewer has a built-in common software for viewing photographs and movies taken or obtained by the person of the system. Elcomsoft Telephone Viewer customers do not need to seek for the recordsdata they want in an enormous gallery. This system will mechanically manage images and movies into folders. Information taken utilizing the telephone’s built-in digital camera might be displayed individually from images taken as attachments, whereas photographs from system and person applications (buttons, menus, logos and splash screens) might be displayed in a separate folder. A viewing mode is out there with automated division of media recordsdata into albums.
iCloud Picture Library
Beginning with model 2.30, Elcomsoft Telephone Viewer helps viewing images taken from iCloud Picture Library utilizing Elcomsoft Telephone Breaker. Helps automated division into albums and picture filtering (by knowledge kind and date).
Wi-fi Wi-Fi connection
The saved Wi-Fi connection viewer lets you view a listing of SSIDs and passwords for Wi-Fi networks saved in iOS backups, but additionally decide the date and time of the primary and final connection of the purpose of entry. Moreover, info is out there in regards to the BSSID of the entry factors and the encryption algorithm used.
Sorting the listing of networks by the date of final entry will can help you discover out which networks the person has linked to and in what order throughout a sure time period.
Put in purposes
Elcomsoft Telephone Viewer customers can view your complete listing of apps put in on their iPhone or iPad. App variations, date and time of buy (buy or first obtain if the app is free) and the Apple account used to make the acquisition are displayed. A few of this knowledge just isn’t accessible within the system backup itself and is mechanically requested via iTunes.
Entry to the listing of put in purposes lets you rapidly decide during which social networks and thru which messaging applications the person communicates, during which banks he has accounts and during which purposes he meets.
Help for EXIF tags
EXIF tags include details about the placement, time and capturing parameters, lighting circumstances and technical traits of the digital camera or camcorder. All this knowledge is captured and displayed in Elcomsoft Telephone Viewer. Want to seek out images taken on the day of the incident being investigated? Elcomsoft Telephone Viewer has a built-in filter that lets you set the time interval and shows solely these images that had been taken inside the specified time.
Assortment of location knowledge
Location knowledge is extracted from a number of sources, together with images, iMessages and attachments, system logs, momentary recordsdata, and particular person app knowledge areas (Uber, Google Maps, Apple Maps, and extra).
In fashionable smartphones, the coordinates of the capturing location are mechanically saved within the EXIF tags of every picture. Linking and displaying these coordinates on the map will permit the skilled to seek out out the precise place the place this or that shot was taken.
Knowledge extracted from all sources is displayed as a single listing, after analyzing which you’ll be able to perceive the place the person of the system was inside a sure time period. The coordinate evaluation will allow the illustration of the person’s motion path inside a sure time period.
OS: Home windows 11, Home windows 10, Home windows 8/8.1, Home windows 7 and Home windows Server 2008/2016
Download Elcomsoft Telephone Viewer Forensic Version 5.40.39041 (150 MB):
Add comment