iOS Forensic Tools - Practical Mobile Forensics - page 193

Usage of Cellebrite UFED Physical Analyzer
To perform the physical acquisition of an iPhone 4 and older devices with UFED Physical
Analyzer, follow the steps provided. Note that physical acquisition is not supported for
newer iOS devices (iPhone 4S and newer).
1. Launch UFED Physical Analyzer and navigate to the Extract | iOS Device Ex-
traction menu. You will be prompted with the iOS device data extraction wizard,
as shown in the following screenshot:
UFED Physical Analyzer—the iOS Device Data Extraction Wizard screen
2. Click on Physical mode . The first time you run iOS device extraction, you will be
prompted to download and install the iOS support package.
3. Follow the instructions displayed on the screen to turn off the device and place it in
the recovery mode. Once the tool detects the device in the recovery mode, it dis-
plays the device information, as shown in the following figure:
UFED Physical Analyzer—the device information screen