MOSCOW, Nov. 1, 2011 /CNW/ - ElcomSoft Co. Ltd. updates iOS Forensic
Toolkit, adding iOS5 and doubling the acquisition speed. With iOS5
support, iOS Forensic Toolkit can recover device passcodes and perform
physical acquisition of Apple devices running iOS 3.x, 4.x and 5. By
more than doubling the acquisition speed of the earlier versions, the
updated Elcomsoft iOS Forensic Toolkit can acquire a 16-Gb iPhone 4 in
about 20 minutes, or a 32-Gb version in 40 minutes.
Providing near-instant forensic access to encrypted information stored
in the latest iPhone and iPad devices, Elcomsoft iOS Forensic Toolkit
enables access to protected file system dumps extracted from supported
Apple devices even if the original device passcode is unknown.
Forensic Analysis of iOS 5 Devices
While the whole security system received a minor facelift in iOS5, Apple
made significant changes regarding keychain protection, replacing the
encryption algorithm entirely. In addition, Apple made Escrow Keybag
useless to forensic specialists by protecting escrow keys with device
passcode. Apparently, the protection of iOS5 devices relies more
heavily on device passcode than in earlier versions.
Keychains contain information highly valuable to forensic investigators.
This includes stored login credentials to Web sites, Wi-Fi, email and
application passwords, and more. With new encryption employed to
protect keychain items, Elcomsoft iOS Forensic Toolkit becomes the
first commercially available product offering full support for
recovering iOS5 keychains.
Elcomsoft iOS Forensic Toolkit can recover the original passcode by
performing a brute-force attack. With plain-text passcode available,
Elcomsoft iOS Forensic Toolkit can decrypt all items stored in the
Availability and Distribution
Elcomsoft iOS Forensic Toolkit is available immediately. Access to the
new tool is generally provided to qualified government and law
enforcement agencies. Pricing available by request.
About ElcomSoft Co. Ltd.
Founded in 1990, ElcomSoft Co.Ltd. develops state-of-the-art computer
forensics tools, provides computer forensics training and consulting
services. Since 1997, ElcomSoft has been providing support to
businesses, law enforcement, military and intelligence agencies.
ElcomSoft tools are used by most of the Fortune 500 corporations,
multiple branches of the military all over the world, foreign
governments, and all major accounting firms. More information at http://www.elcomsoft.com/
Elcomsoft iOS Forensic Toolkit supports Windows XP, Vista/7, 2003/2008
Server and MacOS X, and is available to select government and law
enforcement customers. More information at http://ios5.elcomsoft.com/.
SOURCE ElcomSoft Co.Ltd.
For further information:
ElcomSoft Co. Ltd.