iOS Forensic Toolkit 5.50: iPhone extraction simplified

Elcomsoft iOS Forensic Toolkit 5.50 features a new communication channel empowering the tool’s acquisition engine. The newly designed communication channel offers faster and more robust extractions and simplifies the acquisition process by removing the need of disabling wireless connectivity.

We updated Elcomsoft iOS Forensic Toolkit, our all-in-one iOS acquisition tool. Version 5.50 features a new communication channel empowering the tool’s acquisition engine. The newly designed communication channel offers faster and more robust extractions and simplifies the acquisition process by removing the need of disabling wireless connectivity.

The new release is all about low-level optimizations to the acquisition engine. The changes affect logical acquisition and jailbreak-based TAR extraction; file system imaging via the extraction agent is unaffected.

In this release, we have redesigned the communication channel between the iPhone and the computer from the ground up. The new communication channel drops legacy dependencies and becomes significantly faster and more robust. It also gets rid of the annoying ‘Wi-Fi bug’, which, in the past, affected systems connected to wireless networks used by other iOS devices. The updated iOS Forensic Toolkit no longer requires disabling the wireless network during the acquisition.

In addition, we have improved the way our tool interacts with the iTunes components installed from the Windows 10’s Microsoft Store. Last but not least, we’ve added support for iOS 13.4.x and iOS 13.5 (beta).

Release notes:

  • Improved connection protocol between the iOS device and the host: faster and more reliable; W-Fi connections no longer affect the acquisition process
  • Improved support for iOS 13.4.x
  • Added support for iOS 13.5 (beta)
  • Added support for some Windows 10 configurations (iTunes & driver issues)
  • Fixed the problem when acquiring crash & diagnostic logs
  • Fixed the problem when creating the application list
  • Added acquisition time reporting for time-consuming operations

See also