Hi everyone,
I want to extract emails from an iPad 2 running iOS 6 which has not jail-broken. Is there any logical extraction method? If the physical extraction is the only way, what are the tools available for it?
Thank you!
The Cellebrite system works wonders for both types of extractions on jail-broke and non jail-broke electronics. I believe the new update added iPads with the ios 6. You will have to use the UFED application on the desktop as the UFED handheld will not image apple devices. I have gotten some emails using a logical but I have found that I get much more information and of course deleted information when running a physical extraction. Hope this helps!
Logical extraction won't get you e-mail, and physical extraction isn't possible unless it is jailbroken. Unless you want to jailbreak the device, you're not getting any e-mail. Also, if it's running iOS 6.1.3, there is no jailbreak available that I know of. iOS 6.1.2 and earlier do have jailbreaks available. Elcomsoft even has a tool to automate the jailbreak for you, but I haven't used that tool myself.
You'll have to make the call. Don't modify the device and get nothing, or modify the device with a jailbreak and try to get something.
Since it's e-mail, is there any chance you can get permission to download the e-mails from the server?
EDITKray,
When have you been able to retrieve e-mails with a logical image? I've never had an iPad 2 in my lab, but I've had lots of iPhones 4S and 5 and later generation iPads and iPods, and I've never retrieved the e-mail database from a logical image using Cellebrite. According to Cellebrite (amongst others) we are limited to logical images of iPad 2 and later on non-jailbroken devices.
i can recommend the UFED kit (
one of my colleagues is a Mac genius and suggests Blacklight (
Good luck - let us know how you get on.
Regards, Ross
Thank you all for your immediate replies. But at this moment we can't afford for a tool like Cellebrite UFED. Any other suggestions please?
Regards,
Damith
Do you have a budget?
What are your expectations, deadlines, needs? (by this I mean are you looking for defensible reporting for a legal matter or do you just want a copy of the emails)
Is this a personal matter, for study or for a client?
Hi Ross,
Thank you for passing along the word about BlackLight - we appreciate it!
Our software prices are consistent and readily available. If you select the Add to Cart button (
Keep in mind that there is no software functionality or customer support penalty if a customer does not renew their BlackLight license subscription. Our BlackLight software remains fully functional, and we continue to provide unlimited technical support to our customers even after a BlackLight license expires. However, customers no longer receive all BlackLight software updates at no additional cost once their license expires.
All, please feel free to contact us any time with additional questions at
Carpe Datum,
The BlackBag Team