Currently, Oxygen Forensic® Detective allows investigators to extract the following data: Full File System Extraction via Data Accessĭatasets will vary depending on the extraction method and whether the device is unlocked or not. Supported Apple iOS versions are 8.0-14.7 beta. Extraction MethodsĪ) Checkm8 – Automatic extraction of supported devices that include Apple’s A7 to A11 SoC, from iPhone 5s through X running up to iOS 14.7 beta.ī) Checkra1n and Unc0ver – Extraction of jailbroken devices that include Apple’s A7 to A11 SoC.Ģ) iTunes Logical Extraction – Supported Apple iOS versions are 8.0 – 14.7 beta.ģ) Logical File Structure Extraction – Files available via PTP protocol can be extracted. The following section will cover each extraction method along with their supported devices. Some of these extraction methods can acquire vastly comprehensive datasets of existing and deleted data, others offer more limited extractions. However, theĮxtraction methods that allow our software to extract data from each device areĪs previously mentioned, there are several alternative extraction methods included in our software. Support expands through the entirety of the iPhone product line. Let’s start by reviewing our supported devices.
In this article, we will focus on iPhones and the support provided by Oxygen Forensic® Detective. Additionally, we offer multiple avenues for acquiring and recovering data, with each method giving the investigator access to a slightly different dataset. Today, our all-in-one forensic solution, Oxygen Forensic® Detective, can extract, decrypt, and analyze data from all existing models of iPhone and iPad. Their popularity in the mobile device industry has led us to place high importance on developing solutions that support the latest iPhones and iPads.
With items like the iPhone, iPad, and iMac in their product line, Apple Inc.