Information Technology Reference
In-Depth Information
Elcomsoft iOS Forensic Toolkit
Elcomsoft iOS Forensic Toolkit
(
EIFT
) is a set of tools aimed at making the acquisition
of iOS devices easier. EIFT is a combination of software that is able to perform forensic ac-
quisition of iOS devices running any version of iOS (note: some iOS versions require the
device to be jailbroken). EIFT can acquire bit-for-bit images of a device's file system, ex-
tract device secrets (passcodes, passwords, and encryption keys), and decrypt the file sys-
tem image. For more information on EIFT, visit
http://www.elcomsoft.com/eift.html
.
The toolkit was initially available only to law enforcement agencies, but now it is available
to everyone. The toolkit supports both Mac OS X and Windows platforms with iTunes 10.6
or later installed.
