Keychain and full file system extraction from iPhone X running iOS 15.6: done #dfir #apple #checkm8

A bit tired of that. Why “several times”? Why sooo sloooow? 😢

Apple TV 4K Keychain and Full File System Acquisition: blog.elcomsoft.com/2022/07/apple-… #dfir

ICYMI: no need to remove the passcode first (iOS 14/15)

Elcomsoft Distributed Password Recovery 4.45 supports Windows Hello PIN codes and LUKS2 encryption: elcomsoft.com/news/820.html #dfir

now available, starting at just 299$

WTF #apple #ios16

Any idea how to update Apple TV 4K (1st gen) from tvOS 13 to 16? Built-in update does not work, reset and update too.

iOS 15.5 Low-Level Keychain Extraction: blog.elcomsoft.com/2023/01/ios-15… #DFIR

My cat ❤️

Apple Releases iOS 12.5.7, iOS 15.7.3. What About Low-Level Extraction? blog.elcomsoft.com/2023/01/apple-… #dfir

Think twice

iOS 16.3.1 added new workouts

Cat is charging

See you at NULLCON tomorrow! Excited to attend it after three years break.

Finally I got it (after 5 years)

iCloud Extraction Turns Twelve blog.elcomsoft.com/2024/05/icloud… #dfir #apple #icloud

When Speed Matters: Optimizing Disk Imaging blog.elcomsoft.com/2024/09/when-s… #dfir // Many thanks to OSForensics !

Microsoft Goes Passwordless: Forensic Implications of Passwordless Microsoft Accounts blog.elcomsoft.com/2025/05/micros…