Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile devices. The tool can decrypt and display data obtained from local and cloud sources for iOS devices.
Version: 5.32.37313.0Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile devices, backups and cloud services.
License: Free To Try $79.00
Operating System: Windows
Homepage: www.elcomsoft.com
Developed by:
Supporting a variety of platforms and data formats, the tool can display information extracted from local and cloud iOS backups and data synchronized to Apple iCloud. Password-protected iTunes backups can be automatically decrypted and analyzed without using third-party tools.
Elcomsoft Phone Viewer is a perfect companion for the range of ElcomSoft mobile forensic tools, offering the ability to view information extracted via physical, logical or over-the-air acquisition.
Elcomsoft Phone Viewer supports all types of backups and synced data pulled from a variety of local and cloud sources, and supports all versions of iOS including the latest builds.
Users of Elcomsoft Phone Breaker can easily view and analyze extracted information in Elcomsoft Phone Viewer.
Investigators can instantly access information about the suspects activities such as their calls, messages, address books and location history in a matter of minutes. You can view both existing and deleted records. The tool can export digital evidence collected from iOS device backups, iCloud and file system images to Microsoft Excel.
The tool is a perfect stand-alone forensic viewer and a great tool for lightweight forensic analysis.
Directly supporting password-protected offline backups produced by Apple iTunes, Elcomsoft Phone Viewer can immediately display information from encrypted backups without requiring Elcomsoft Phone Breaker or another tool to decrypt the backup first. While Elcomsoft Phone Viewer will not break an unknown password (one still has to use Elcomsoft Phone Breaker for that), pre-decrypting offline backups is not required.
The tool can display bookmarks, search and browsing history along with snapshots of opened browser tabs, media and photo libraries, offering convenient access to media galleries with large numbers of files.
Version 5.32.37313.0: Fixed the problem with Skype attachments (macOS version only). Added support for .rar files obtained with checkm8 acquisition method in Oxygen Forensic Detective. A number of small bug fixes and internal improvements.
Version 5.31.37307: New features: Analyze iOS 14 backups and cloud data. Analyze Windows Timeline.
Version 5.31: Added an ability to get metadata on deleted OneDrive files (without the actual recovery which is also possible). Fixed preview/save feature for Skype attachments and profile pictures (Windows only). Several under-the-hood fixes and improvements on processing different data sources.
Version 5.30: Support for new Microsoft accounts data: Apps and services, recent OneDrive files list, OneDrive files Removed media files that have zero size Improved location history parsing for iOS 14 backups and file system images Multiple Wi-Fi connection data improvements: removing duplicates, iOS 14 fixes
Version 5.20.37270.0: Enhancements: Preliminary support for iOS 14 backups Support for .tar files created with Magnet AXIOM Acquire Improved Wi-Fi connections parsing Fixes: Processing media files under certain circumstances Parsing of notes attachments Data export when the path contains non-latin characters
Version 5.20.37270: Fixes: Processing media files under certain circumstances Parsing of notes attachments Data export when the path contains non-latin characters Enhancements: Preliminary support for iOS 14 backups Support for .tar files created with Magnet AXIOM Acquire Improved Wi-Fi connections parsing
Version 5.20: Added preliminary support for iOS 14 backups Added support for .tar files created with Magnet AXIOM Acquire Improved Wi-Fi connections parsing Fixed processing media files under certain circumstances Fixed parsing notes attachments Fixed data export when the path contains non-latin characters
Version 5.10.36812: Clearing program test folder with temporary data. Fixed crash on Windows 7 on backup processing. Fixed program hang on "Counting files for decryption". Added support for new synced iCloud data downloaded by EPB. Added keychain viewer (Forensic edition only). Minor fixes and improvements in UI.
Version 5.10: Added support for new synced iCloud data downloaded by EPB Added keychain viewer (Forensic edition only) Shows contact names in calls and names near phone numbers in Signal chats Fixed date/time processing for messages and calls in Signal chats Fixed crash on data export from main Windows