I have collected several iPhone mobile backups (iPhone 8 Plus, iPhone 12) and each mobile backup is missing call logs entirely notwithstanding the fact that the phones themselves do contain call logs.
Do I need to image the physical iPhones to capture call logs?
Â
Do I need to capture iCloud "synced" data to capture call logs?
Try this
Â
https://blog.elcomsoft.com/2019/07/ios-13-beta-forensics/
Â
For call logs you need to obtain sync data
Hey,
According to Apple you need to encrypt the backup to obtain Call History, and is also the case for Safari history.
https://support.apple.com/en-gb/HT205220
If I recall this became the norm for iOS13 and iOS14.
Regards

