Just looking into iphone extractions a little more and although physical extractions seem to stop at the 4S, file system extractions via Cellebrite seem to be the next best approach. However, I was just wondering whether the file system extraction recovers every single logical file in the file system or not? For example, if the handset was jailbroken and you used a file browser app, would you find anything more via browsing the handset that way? Or would you literally find the same content, only it would obviously take longer + device integrity issues?
In addition, has anyone ever encountered an iPhone that just wont connect to their forensic software?
In addition, has anyone ever encountered an iPhone that just wont connect to their forensic software?
You will be able to make iTunes backup and extract iPhone's data from it.