Elcomsoft iOS Forensic Toolkit

06.07.2012

"ElcomSoft restricts the availability of the Elcomsoft iOS Forensic Toolkit for to select government entries such as law enforcement and forensic organizations and intelligence agencies; also, the toolkit is a subject to special license agreement."

That license agreement insists that you are an approved enforcement agency, and are acting "under the color of the law when operating the product" and that you are the "legal owner or in legal possession and/or control" of the device.

And you know how most software licenses have a button that says "Click Here"? This one has a part where you sign it in ink and return to Elcomsoft before you get hold of the software and USB dongle.

So basically you have to prove that you have a genuine need for this software. Which is a good thing, because Elcomsoft iOS Forensic Toolkit is a set of tools aimed at making it possible to acquire and analyze the entire contents of an iOS device that is passcode protected.

The software side of things runs through Terminal. So you'll need a good working knowledge of the command-line to get it up and running. There is a Guided Access Mode, which walks you through the steps, and a manual mode that enables you to perform each task with specific parameters. We found the Guided Access Mode achieved the task perfectly.