Here is the question I have to pose for everyone. I have a family law case in which the client's spouse walked away from house and took a joint iPad. That iPad had some important information on it and was backed up to iCloud. The account is a joint account and the client has access to it. Does anyone know of a way to extract the backup files from iCloud, short of taking a throw down iPad, wiping it, and restoring the backup file to that iPad? Id rather get the backup files and use lantern to rebuild the device.
I'm pretty sure Elcomsoft offer it as a feature in the phone password breaker software
Elcomsoft Phone Password Breaker can do it.
Major caveat though–you have to be quick. Apple only keeps the last three backups, and by default the iPad will create a new backup every day if it's plugged in and connected to a WiFi network.
If the wife doesn't delete anything from the iPad, you're fine, but if she's deleted stuff and it's been more than 3 days, you may already by out of luck.
BTW, Elcomsoft released a new version today that allows downloading from iCloud without the user's credentials–just the iCloud token scraped from the PC or Mac if the user had iCloud Control Panel installed. Good stuff.
update on this one. I actually used Wondershare Dr. iPhone to download the backup folder and then was able to process it like normal using Lantern.
BTW, Elcomsoft released a new version today that allows downloading from iCloud without the user's credentials–just the iCloud token scraped from the PC or Mac if the user had iCloud Control Panel installed. Good stuff.
Nice. Thanks for pointing that out.