Dear Friends,

We are excited to close this year with so thrilling news about Skype data extraction and iPhone data acquisition.

Skype Forensics: Straight Off the Cloud

While everyone is decorating their homes for the holiday season, we are busy updating our range of forensic tools. First, the Skype update. We updated the cloud analysis feature of Elcomsoft Phone Breaker and Viewer to help you obtain and analyze Skype data. Elcomsoft Phone Breaker received the ability to download Skype conversation histories, files and metadata directly from Microsoft servers. Elcomsoft Phone Viewer can now browse through and analyze the downloaded Skype data.

Elcomsoft Phone Breaker 9.40 can download the Skype metadata, while Elcomsoft Phone Viewer 4.80 can display this information.

BFU Forensics: Extracting Locked iPhones

Then, the BFU update (what’s BFU, anyway?). We updated Elcomsoft iOS Forensic Toolkit with the ability to extract and decrypt parts of the iOS keychain from locked and disabled devices without the lock screen passcode. BFU devices are those that have been powered off or rebooted and have never been subsequently unlocked, not even once, by entering the correct screen lock passcode.

In Apple’s world, the content of the iPhone remains securely encrypted until the moment the user taps in their screen lock passcode. The screen lock passcode is absolutely required to generate the encryption key, which in turn is absolutely required to decrypt the iPhone’s file system. In other words, almost everything inside the iPhone remains encrypted until the user unlocks it with their passcode after the phone starts up. It is the “almost” part of the “everything” that we target in this update, extracting the available bits and pieces that are available before the unlock.

The Blog

We’ve got a number of articles in our blog that you may find interesting or usable – or both.

• Challenges in Computer and Mobile Forensics: What to Expect in 2020
• BFU Extraction: Forensic Analysis of Locked and Disabled iPhones
• Extracting Skype Histories and Deleted Files Metadata from Microsoft Account
• iOS Device Acquisition with checkra1n Jailbreak
• Forensic Acquisition of Apple TV with checkra1n Jailbreak
• What is Password Recovery and How It Is Different from Password Cracking
• Attached Storage Forensics: Forensic Analysis of Synology NAS Devices

Meet with us

We travel around the globe, and invite you to visit us at one of the upcoming events:

• Regional Digital and Cyber Investigation CPD Workshops
  West Midlands Region, West Mercia Police HQ, UK
  29 January 2020
• 2020 Resonant China Partner Conference
  Guangzhou, China
  2 – 4 March 2020
• Regional Digital and Cyber Investigation CPD Workshops
  Eastern Region – Bedfordshire Police HQ, UK
  5 March 2020
• Future of Forensics
  Freising, Germany
  23 March 2020
• Future of Forensics
  Berlin, Germany
  25 March 2020
• Forensics Europe Expo
  London, UK
  19 – 21 May 2020
• Techno Security & Digital Forensics Conference
  Marriott Resort at Grande Dunes in Myrtle Beach, SC, USA
  31 May – 03 June 2020

Sincerely yours,
ElcomSoft team