±Your Account
Membership:
New Today: 0
New Yesterday: 4
Overall: 24360
Visitors: 56±Latest Articles
· Catching the ghost: how to discover ephemeral evidence with Live RAM analysis
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
iCloud
iCloud
Posted: Fri Dec 07, 2012 11:52 am
We are working on a case involving CP. We have examined the suspects hard drive but came up empty. We believe he may have things(pics and or videos) stored in an icloud account. Has anyone ever subpoened an icloud account? Or have any contact info. Any help will be appreciated!
-

srogers - Member
Re: iCloud
Posted: Fri Dec 07, 2012 3:18 pm
I can't find the link to the article, however, I recall that a case in the US argued the point that the Cloud storage utilised by a user was considered a peripheral of the exhibit, much like a NAS or external HDD would be if it was found attached to the computer at the time of seizure. I will continue to dig around for it.
-

scuzz - Member
Re: iCloud
Posted: Fri Dec 07, 2012 5:49 pm
With the right warrant and his username and password (which you may be able to recover from his computer) you can use a elcomsoft tool to download his icloud information
www.elcomsoft.com/PR/iCloud.html
www.elcomsoft.com/PR/iCloud.html
-

randomaccess - Senior Member
















