Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile backups. Supporting a variety of platforms and data formats, the tool can display information extracted from local and cloud iOS, Windows Phone 8.x, Windows 10 Mobile and BlackBerry 10 backups. Password-protected iTunes backups can be automatically decrypted and analyzed without using third-party tools.
Elcomsoft Phone Viewer is a perfect companion for the range of ElcomSoft mobile forensic tools, offering the ability to view information extracted via physical, logical or over-the-air acquisition. Elcomsoft Phone Viewer supports all types of backups and synced data pulled from a variety of local and cloud sources.
In addition to iCloud backups, Apple syncs call logs, browsing history and Safari open tabs, notes, calendars and contacts are synced in nearly real time via iCloud. By pulling synced information from Apple iCloud with Elcomsoft Phone Breaker and viewing acquired information in Elcomsoft Phone Viewer, investigators can instantly access information about the suspects activities such as their calls, messages, address books and location history in a matter of minutes. You can view both existing and deleted records.
The tool is a perfect stand-alone forensic viewer and a great tool for lightweight forensic analysis. Directly supporting password-protected offline backups produced by Apple iTunes, Elcomsoft Phone Viewer can immediately display information from encrypted backups without requiring Elcomsoft Phone Breaker or another tool to decrypt the backup first. While Elcomsoft Phone Viewer will not break an unknown password (one still has to use Elcomsoft Phone Breaker for that), pre-decrypting offline backups is not required.
The tool can display bookmarks, search and browsing history along with snapshots of opened browser tabs, media and photo libraries, offering convenient access to media galleries with large numbers of files.
Changelog for this release:
parsing Apple Pay data (associated cards and transactions)
improved iOS 12 (beta) support
extracting and parsing Wallet data from backups and .tar archives
recover deleted messages from iOS 11/12 backups
get more location data from various sources
grouping media files by application
About 50 MB free space on hard disk
Unregistered/trial version shows up to 10 records in every category (contacts, calls, messages, media files).