Retreive iCloud Data Forensically

Hey folks,

So I have valid credentials of an iCloud account that I need to fully dump. Any methods you guys recommend to retrieve the data forensically sound.

Cheers.

Oxygen Forensic Detective added the ability to extract full iCloud backups made from iOS devices v. 9.0 and later…. and works perfectly -)

http//i.imgur.com/S8CsEtK.jpg

PS If this means something to you, OFD is all-in-one forensic software, you don't need two programs to extract and analyze data.

If you are LE, you can use the Cellebrite UFED Cloud Analyzer.

Best regards,
Ron Serber

Great , thanks everyone.

I was looking for a non-commercial method for this situation.

I will contact Cellebrite.

Thanks.

At my last employer I used Elcomsoft's Phone Breaker to download the iCloud backup.
https://www.elcomsoft.com/help/en/eppb/index.html?downloading_icloud_backups_.html

I then used Cellebrite UFED PA to parse the backup and provide needed reports.