Hello.
I've Ipad A1458. Ipad doesn't have a password. I want to do a physical copy of Ipad and to examine it in FTK or X-way. I used Celebrate UFED for it. But UFED doesn't allow to do the physical copy, only logic or file system and I can`t use the image of UFFD in FTK or X-way. I could use UFED Analyzer but for my case more comfortable to use FTK or X-way.
1) How to do the physical copy an Ipad?
2) How to use the copy an Ipad in FTK or X-way?
Thanks in advance.
Do a logical with Cellebrite. Say no to the optional encryption of the extraction. This should create a Zip file (and a .ufd file).
Either add the zip file using X-Ways (or FTK) or extract the zip to a directory and add that directory.
But if I do a logical image I can't repair deleted files, isn't it? In this case, I can do the image with Itunes format AD1 and add the image in FTK (X-Way).