The Toolkit can now unlock and image iPhone 4, 5, and 5c devices protected with an unknown screen lock passcode.
Passcode unlocks and full physical acquisition support are now available for legacy iPhone models – albeit only in the Mac edition of iOS Forensic Toolkit. Passcode unlock and support for legacy devices: iPhone 4, 5 and 5c During the extraction, iOS Forensic Toolkit images the iPhone file system and pulls and decrypts the keychain, which in turn stores the user’s passwords, certificates, authentication tokens, and keys. This includes the entire range of iPhone 12 models running all versions of iOS 14 from the original iOS 14.0 all the way through iOS 14.3. Automatically disables screen lock for smooth, uninterrupted acquisitionĮlcomsoft iOS Forensic Toolkit 7.0 brings low-level extraction support for the latest generation of Apple devices based on the A14 Bionic.Extracts and decrypts protected keychain items.Passcode unlock and physical acquisition for legacy devices (iPhone 4, 5 and 5c).Logical acquisition extracts backups, crash logs, media and shared files.Full file system extraction and keychain decryption without a jailbreak (iPhone 5s – iPhone 12, iOS 9.0 – 14.3).Image device file system, extract device secrets (passwords, encryption keys, and protected data), and decrypt the file system image. Perform full file system and logical acquisition of iPhone, iPad, and iPod Touch devices.