Introduction

Elcomsoft Phone Breaker

Elcomsoft Phone Breaker (EPB) enables forensic access to iTunes, iCloud and BlackBerry backups and synchronized Microsoft Account data. The Windows edition features the patented GPU acceleration technology to deliver the fastest password recovery speeds on a single PC. The tool can attack the original plain-text password that protects encrypted backups containing address books, call logs, SMS archives, calendars, camera snapshots, voice mail and email account settings, applications, Web browsing history and cache.

Use cases:

▪Decrypt iOS backups (with known password).

▪Download and decrypt iOS backups from iCloud (with valid authentication credentials).

▪Download iCloud synchronized data (with valid authentication credentials).

▪Decrypt and display Keychain data extracted with Elcomsoft iOS Forensic Toolkit or stored in password-protected iTunes backups (password must be known)

▪Download iCloud Keychain and other point-to-point encrypted data from Apple accounts (authentication credentials and password/passcode of a trusted device required).

▪Decrypt classic BlackBerry backups (known password).

▪Decrypt BlackBerry 10 backups (up to BBOS 10.3.2.2876) created with BlackBerry Link (BlackBerry ID password must be known).

▪Download data from Microsoft accounts including text messages, call logs, contacts, notes, locations, browsing history, search history etc.

Elcomsoft Phone Viewer

Elcomsoft Phone Viewer is a lightweight tool for analyzing information contained in mobile backups, synchronized data and file system images obtained with Elcomsoft's other tools.Analyze information stored in offline and cloud backups and synchronized data extracted with Elcomsoft Phone Breaker and Elcomsoft iOS Forensic Toolkit. Explore the iOS file system images extracted with Elcomsoft iOS Forensic Toolkit and select third-party tools in both .tar and .zip formats.Elcomsoft Phone Viewer (EPV) enables access to contacts, messages, call logs, notes, media, and calendar data located in mobile backups and file system images, and displays essential information about the device such as model name, serial number, date of last backup etc.

In addition to iOS, Elcomsoft Phone Viewer allows viewing BlackBerry 10 backups produced with BlackBerry Link, as well as Microsoft Account data downloaded with Elcomsoft Phone Breaker.

Elcomsoft Phone Viewer supports encrypted and unencrypted iOS backups. A valid password is required for accessing encrypted backups.

Elcomsoft Cloud eXplorer

Elcomsoft Cloud eXplorer (ECX) is an all-in-one tool for downloading, viewing and analyzing information stored in the user's Google Account. The tool pulls information from the many available sources scattered throughout the Google Account, automatically parses the data and displays information in human-readable form.

Google collects massive amounts of information from registered customers. Contacts and Hangouts messages, Google Keep notes, search history with click-through data, synced Google Chrome data including passwords and forms, bookmarks, page transitions and browsing history, location history, calendars and images are just a few pieces of data to mention. The different types of data are scattered around different Google servers and stored in diverse formats. Elcomsoft Cloud Explorer not only downloads more data than provided by Google itself but also offers the ability to view and analyze information without leaving the tool.

With valid authentication credentials, ECX becomes the perfect tool for investigating users’ online activities. The integrated viewer displays downloaded data in human-readable form, making it easy to analyze users’ communication circles, search and browsing activities. The viewer includes instant filtering and quick search functionality. Finding a certain contact, message or Web site authentication credentials is easy: you just need to type part of the word you are looking for into the search box.

Elcomsoft eXplorer for WhatsApp

Elcomsoft eXplorer for WhatsApp (EXWA) provides the ability to obtain and explore WhatsApp data stored in iTunes and iCloud backups, Android WhatsApp and WhatsApp Business data.

Use cases:

▪Download and decrypt WhatsApp for iOS data from iCloud backups.

▪Download WhatsApp files synchronized with iCloud.

▪Access WhatsApp contacts, messages, call history, and media located in iTunes backups.

▪Download and decrypt WhatsApp data from Google Drive.

▪Access WhatsApp and WhatsApp Business contacts, messages, call history, and media located in Android backups.

▪Load WhatsApp and WhatsApp Business contacts, messages, call history, and media from an Android device.