Elcomsoft iOS Forensic Toolkit 8.22 and 7.81 expand low-level extraction support, now covering the entire iOS/iPadOS 15 range. The newly supported OS versions include 15.6 through 15.7.2. The new method enables the extraction of the full file system including keychain, and supports devices built with the A12 and newer chips, effectively covering the iPhone 8/X through iPhone 13 range, and many iPads including those based on Apple M1 chips.

The latest update to Elcomsoft's iOS Forensic Toolkit 8.22 and 7.81 brings exciting news for investigators and forensic professionals. With full low-level extraction support for the entire iOS 15 range, including versions 15.6 through 15.7.2, the new method enables extraction of the full file system, including protected keychain records. This new feature covers a wide range of hardware, effectively covering the iPhone 8/X through iPhone 13 range, and many iPads, including those based on Apple M1 chips.

The new extraction method utilizes Elcomsoft proprietary extraction agent, enables full access to the file system and includes the ability to extract and decrypt the keychain in addition to sandboxed app data, system databases and other information available in the file system.

This new update offers enhanced capabilities for forensic professionals, providing them with the ability to extract and analyze data from the latest Apple devices running all versions of iOS 15. With its expanded compatibility and comprehensive extraction features, Elcomsoft continues to offer one of the most powerful and efficient mobile forensic tools on the market.

Compatibility

Low-level extraction now supports a wide range of hardware and iOS builds. On all Apple devices capable of running iOS/iPadOS 15, low-level extraction is available for iOS 15.0 through 15.7.2. Notably, the new extraction method is available for the iPad models based on Apple M1 chips. Apple M2-based iPad Pro models are currently supported with the partial file system extraction process as these models are launched with iOS 16 on board.

Elcomsoft iOS Forensic Toolkit 7.81 and 8.22 release notes:

• Extraction agent: added full file system and keychain extraction for iOS/iPadOS 15.6 to 15.7.2
• Extraction agent: improved iOS/iPadOS 15.4 and 15.5 support
• Extraction agent: improved diagnostics and error handling on agent signing
• Minor bug fixes and improvements