Information Technology Reference
In-Depth Information
Features of EIFT
The following are the features of EIFT:
• Supports physical and logical acquisition.
• Acquires complete bit-for-bit device images.
• Quick file system acquisition: 20-40 minutes for 32 GB models.
• Supports passcode recovery attacks.
• Extracts device keys required to decrypt a raw disk image as well as keychain
items.
• Decrypts a raw disk image and keychain items.
• Zero-footprint: this operation leaves no traces and alterations to device contents.
• Fully accountable: every step of investigation is logged and recorded.
Search WWH ::




Custom Search