Clik here to view.
Physical Extraction and File System Imaging of iOS 12 Devices
The new generation of jailbreaks has arrived for iPhones and iPads running iOS 12. Rootless jailbreaks offer experts the same low-level access to the file system as classic jailbreaks – but without...
View ArticleiOS 12 Rootless Jailbreak
The new generation of jailbreaks has arrived. Available for iOS 11 and iOS 12 (up to and including iOS 12.1.2), rootless jailbreaks offer significantly more forensically sound extraction compared to...
View ArticleClik here to view.
A Bootable Flash Drive to Extract Encrypted Volume Keys, Break Full-Disk...
Full-disk encryption presents an immediate challenge to forensic experts. When acquiring computers with encrypted system volumes, the investigation cannot go forward without breaking the encryption...
View ArticleClik here to view.
Microsoft Office encryption evolution: from Office 97 to Office 2019
The first Microsoft Office product was announced back in 1988. During the past thirty years, Microsoft Office has evolved from a simple text editor to a powerful combination of desktop apps and cloud...
View ArticleWhat is Password Recovery and How It Is Different from Password Cracking
Why wasting time recovering passwords instead of just breaking in? Why can we crack some passwords but still have to recover the others? Not all types of protection are equal. There are multiple types...
View ArticleChallenges in Computer and Mobile Forensics: What to Expect in 2020
Challenges in Computer and Mobile Forensics: What to Expect in 2020 The past two years introduced a number of challenges forensic experts have never faced before. In 2018, Apple made it more difficult...
View ArticleOur Developments and Achievements in 2019
For us, this year has been extremely replete with all sorts of developments in desktop, mobile and cloud forensics. We are proud with our achievements and want to share with you. Let’s have a quick...
View ArticleWhy Mobile Forensic Specialists Need a Developer Account with Apple
In our recent article iPhone Acquisition Without a Jailbreak I mentioned that agent-based extraction requires the use of an Apple ID that has been registered in Apple’s Developer Program. Participation...
View ArticleClik here to view.
Secure Instant Messengers
In today’s world of everyone wanting a slice of one’s personal information, users become more and more concerned about the privacy. The WhatsApp/Facebook integration raised an additional concern,...
View ArticleClik here to view.
iPhone Physical Acquisition: iOS 11.4 and 11.4.1
The two recent jailbreaks, unc0ver and Electra, have finally enabled file system extraction for Apple devices running iOS 11.4 and 11.4.1. At this time, all versions of iOS 11 can be jailbroken...
View Article
