Elcomsoft iOS Forensic Toolkit 8.30 and 7.90 expand low-level extraction support, now covering iOS 16.0 through 16.3.1 on latest-generation iPhone and iPad models. For the first time ever, full file system extraction becomes available on the iPhone 14 and 14 Pro range of devices and other iPhone and iPad models built with the A12 and newer chips, effectively covering the iPhone Xr/Xs through iPhone 14/Pro range and many corresponding iPads including those based on Apple M1 and M2 chips.

The latest update to Elcomsoft's iOS Forensic Toolkit 8.30 and 7.90 brings exciting news for investigators and forensic professionals, making low-level file system extraction available for latest-generation iPhone and iPad devices including the current iPhone 14, iPhone 14 Plus, as well as iPhone 14 Pro and iPhone 14 Pro Max devices. Full file system extraction support is available for iOS 16.0 through 16.3.1, and supports a wide range of hardware, effectively covering all iPhone models from the iPhone Xs/Xr through iPhone 14 range, as well as many iPads, including those based on Apple M1 and M2 chips.

The new extraction method utilizes Elcomsoft proprietary extraction agent, enables full access to the file system and includes the ability to extract sandboxed app data, system databases and other information available in the file system. We are working on bringing full keychain decryption support, which is scheduled for one of upcoming releases. We are also working on iOS 16.4 support.

This new update offers enhanced capabilities for forensic professionals, providing them with the ability to extract and analyze data from the latest Apple devices running select versions of iOS 16. With its expanded compatibility and comprehensive extraction features, Elcomsoft continues to offer one of the most powerful and efficient mobile forensic tools on the market.

In addition, iOS Forensic Toolkit 8.30 expands checkm8 extraction support, now supporting select Apple devices running iOS 16.5.1.

Compatibility

Low-level file system extraction is now available for a wide range of hardware and iOS builds. On all Apple devices built with the A12 Bionic and newer chips that are capable of running iOS/iPadOS 16, low-level extraction is available for iOS 16.0 through 16.3.1. Notably, the new extraction method is available for the iPad models based on Apple M1 and M2 chips.

Elcomsoft iOS Forensic Toolkit 8.30 release notes:

• extraction agent: added full file system extraction for iOS 16.0-16.3.1 on A12+ devices
• checkm8: added support for iOS 16.5.1
• Minor bug fixes and improvements

Elcomsoft iOS Forensic Toolkit 7.90 release notes:

• extraction agent: added full file system extraction for iOS 16.0-16.3.1 on A12+ devices
• Minor bug fixes and improvements