Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile devices, backups and cloud services. Supporting a variety of platforms and data formats, the tool can display information extracted from local and cloud iOS backups and data synchronized to Apple iCloud. Password-protected iTunes backups can be automatically decrypted and analyzed without using third-party tools.
Elcomsoft Phone Viewer is a perfect companion for the range of ElcomSoft mobile forensic tools, offering the ability to view information extracted via physical, logical or over-the-air acquisition. Elcomsoft Phone Viewer supports all types of backups and synced data pulled from a variety of local and cloud sources, and supports all versions of iOS including the latest builds.
Users of Elcomsoft Phone Breaker can easily view and analyze extracted information in Elcomsoft Phone Viewer. Investigators can instantly access information about the suspects activities such as their calls, messages, address books and location history in a matter of minutes. You can view both existing and deleted records. The tool can export digital evidence collected from iOS device backups, iCloud and file system images to Microsoft Excel.
The tool is a perfect stand-alone forensic viewer and a great tool for lightweight forensic analysis. Directly supporting password-protected offline backups produced by Apple iTunes, Elcomsoft Phone Viewer can immediately display information from encrypted backups without requiring Elcomsoft Phone Breaker or another tool to decrypt the backup first. While Elcomsoft Phone Viewer will not break an unknown password (one still has to use Elcomsoft Phone Breaker for that), pre-decrypting offline backups is not required.
The tool can display bookmarks, search and browsing history along with snapshots of opened browser tabs, media and photo libraries, offering convenient access to media galleries with large numbers of files.
Changelog for this release:
Added support for new synced iCloud data downloaded by EPB
Added keychain viewer (Forensic edition only)
Shows contact names in calls and names near phone numbers in Signal chats
Fixed date/time processing for messages and calls in Signal chats
Fixed crash on data export from main Windows
About 50 MB free space on hard disk
Unregistered/trial version shows up to 10 records in every category (contacts, calls, messages, media files).