±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 36767
New Yesterday: 4 Visitors: 104

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

IOS physical acquisition

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Lucio
Member
 

IOS physical acquisition

Post Posted: May 18, 13 22:31

Hello,
could some UFED expert tell me what's the limit of the physical acquisition on IOS? Is IOS 6 supported as physical or just logical?

thanks  
 
  

RonS
Senior Member
 

Re: IOS physical acquisition

Post Posted: May 18, 13 22:50

iOS 6 is supported for physical extraction when running on devices before the 4S (4S and iPhone 5 are not supported for physical).
All devices are supported for logical extraction. Latest version of the UFED physical and Logical Analyzer now also supports logical file system extraction ( and not just physical)

Best regards,
Ron  

Last edited by RonS on May 19, 13 19:37; edited 1 time in total
 
  

Lucio
Member
 

Re: IOS physical acquisition

Post Posted: May 19, 13 14:41

- RonS

All devices are supported for logical extraction. Latest version of the UFED physical and Logical Analyzer now also supports logical file system extraction ( and not just physical)

Best regards,
Ron

Thanks Ron for your reply. Could you please better explain the part above?  
 
  

RonS
Senior Member
 

Re: IOS physical acquisition

Post Posted: May 19, 13 19:41

Hi Lucio,

As long as an iOS device is not locked, a logical extraction is possible.
The latest version of UFED PA/LA added the capability to perform a logical file system extraction from all devices as long as they are not locked.
In the past you could only perform such extraction using the UFED classic and UFED Touch devices.

Physical extraction is supported for devices running iOS 6 on hardware before the 4S and iPhone 5.  
 
  

Lucio
Member
 

Re: IOS physical acquisition

Post Posted: May 20, 13 00:51

thanks I was missing the fact there are different versions of UFED  
 
  

Lucio
Member
 

Re: IOS physical acquisition

Post Posted: May 20, 13 12:06

Is there a comparison sheet between UFED versions?  
 
  

RonS
Senior Member
 

Re: IOS physical acquisition

Post Posted: May 23, 13 22:39

lucio,

UFED Touch was launched in July 2012 and UFED Classic is not being sold anymore.

See the UFED Touch brochure for some of its highlights:
www.cellebrite.com/ima...SH-web.pdf

Ron  
 

Page 1 of 1