IOS physical acquis...
 
Notifications
Clear all

IOS physical acquisition

7 Posts
2 Users
0 Reactions
1,069 Views
(@lucio)
Active Member
Joined: 14 years ago
Posts: 16
Topic starter  

Hello,
could some UFED expert tell me what's the limit of the physical acquisition on IOS? Is IOS 6 supported as physical or just logical?

thanks


   
Quote
 RonS
(@rons)
Reputable Member
Joined: 17 years ago
Posts: 358
 

iOS 6 is supported for physical extraction when running on devices before the 4S (4S and iPhone 5 are not supported for physical).
All devices are supported for logical extraction. Latest version of the UFED physical and Logical Analyzer now also supports logical file system extraction ( and not just physical)

Best regards,
Ron


   
ReplyQuote
(@lucio)
Active Member
Joined: 14 years ago
Posts: 16
Topic starter  

All devices are supported for logical extraction. Latest version of the UFED physical and Logical Analyzer now also supports logical file system extraction ( and not just physical)

Best regards,
Ron

Thanks Ron for your reply. Could you please better explain the part above?


   
ReplyQuote
 RonS
(@rons)
Reputable Member
Joined: 17 years ago
Posts: 358
 

Hi Lucio,

As long as an iOS device is not locked, a logical extraction is possible.
The latest version of UFED PA/LA added the capability to perform a logical file system extraction from all devices as long as they are not locked.
In the past you could only perform such extraction using the UFED classic and UFED Touch devices.

Physical extraction is supported for devices running iOS 6 on hardware before the 4S and iPhone 5.


   
ReplyQuote
(@lucio)
Active Member
Joined: 14 years ago
Posts: 16
Topic starter  

thanks I was missing the fact there are different versions of UFED


   
ReplyQuote
(@lucio)
Active Member
Joined: 14 years ago
Posts: 16
Topic starter  

Is there a comparison sheet between UFED versions?


   
ReplyQuote
 RonS
(@rons)
Reputable Member
Joined: 17 years ago
Posts: 358
 

lucio,

UFED Touch was launched in July 2012 and UFED Classic is not being sold anymore.

See the UFED Touch brochure for some of its highlights
http//www.cellebrite.com/images/stories/brochures/UFED-Touch-Ultimate-ENGLISH-web.pdf

Ron


   
ReplyQuote
Share: