Hello everyone,
I would like to find out anyone getting a message from their UFED Touch when performing a screen capture of iphone devices?
The message I got was "When taking a screenshot from an iPhone, a client to enable this functionality is uploaded to the device. Restarting the device will delete the client application. Note Some of the screenshots taken by the solution may be stored on the device and appear in the extraction itself. To continue press Yes. "
Previously before I updated it to v4.1, I will not get such messages when I perform screen capture using UFED Touch.
The message is quite daunting as it implies to me that the screen shots that I intend to capture using UFED Touch will be stored into the iphone devices.
I'm using Cellebrite's UFED Touch Ultimate (v 4.1) on iphone 4, 5S & 6.
I've seen that function before but never really needed to use it. Maybe a PM to Ron Serber to clarify, but I feel it unlikely that the pictures would be stored on the user partition, maybe volatile memory somewhere.
To be safe I'd do a Physical/Advanced Logical download with PA first, then maybe capture the screen shots you want so you don't end up with any screen shots in the evidentiary download.