Low-level extraction of iOS 16.6.1

Elcomsoft iOS Forensic Toolkit 8.52 expands agent-based low-level extraction of Apple mobile devices, adding support iOS 16.5.1, 16.6 and 16.6.1 on A11 Bionic and newer chips, and improving agent success rate for devices running iOS 15.0 through 16.5.

The first update to Elcomsoft's iOS Forensic Toolkit 8.52 released in 2024 brings exciting news for investigators and forensic professionals, making full low-level extraction available for iPhone and iPad devices running iOS 16.6.1 and older versions. Supported models include devices built with the Apple A11 Bionic and newer chips, up to and including iPhone 14, iPhone 14 Plus, iPhone 14 Pro and iPhone 14 Pro Max devices. iPads built A12X/A12Z Bionic and newer chips (including M1 and M2) are also supported.

While the latest update now offers gapless low-level extraction support for all versions of iOS 16 up to and including iOS/iPadOS 16.6.1 on a wide range of devices, we have also enhanced support for devices that run older versions of iOS. The new release significantly improves agent success rate for iOS/iPadOS 15.0 through 16.5, making the extraction process more reliable.

The updated low-level extraction method utilizes Elcomsoft proprietary extraction agent, which enables full access to the file system and the keychain. The extraction agent can extract sandboxed app data, system databases and other information available in the file system.

This new update offers enhanced capabilities for forensic professionals, providing them with the ability to extract and analyze data from the latest Apple devices running select versions of iOS 16. With its expanded compatibility and comprehensive extraction features, Elcomsoft continues to offer one of the most powerful and efficient mobile forensic tools on the market.

Additional Information

We consistently write articles to assist forensic professionals in navigating the ever-evolving landscape of mobile forensics. Please check out the latest blog posts:

Compatibility

Agent-based low-level extraction (full file system and keychain) is now available for a wider range of hardware and iOS builds. On all Apple devices built with the A11 Bionic and newer chips capable of running iOS/iPadOS 16, low-level extraction is available for iOS 16.0 through 16.6.1. On devices running older iOS builds, we’ve improved agent success rate for iOS 15.0-16.5.
iOS Forensic Toolkit 8.52

Release Notes

Extraction agent: added support for iOS 16.5.1, 16.6 and 16.6.1 (all supported devices from A11 Bionic and up)
Extraction agent: improved agent success rate for iOS 15.0-16.5