Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile backups. The tool can decrypt and display information extracted from local and cloud sources for iOS, Windows 10 and BlackBerry 10
Version: 4.21.30097Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile backups.
License: Free To Try $79.00
Operating System: Windows
Homepage: www.elcomsoft.com
Developed by:
Supporting a variety of platforms and data formats, the tool can display information extracted from local and cloud iOS, Windows Phone 8.x, Windows 10 Mobile and BlackBerry 10 backups. Password-protected iTunes backups can be automatically decrypted and analyzed without using third-party tools.
Elcomsoft Phone Viewer is a perfect companion for the range of ElcomSoft mobile forensic tools, offering the ability to view information extracted via physical, logical or over-the-air acquisition.
Elcomsoft Phone Viewer supports all types of backups and synced data pulled from a variety of local and cloud sources.
In addition to iCloud backups, Apple syncs call logs, browsing history and Safari open tabs, notes, calendars and contacts are synced in nearly real time via iCloud.
By pulling synced information from Apple iCloud with Elcomsoft Phone Breaker and viewing acquired information in Elcomsoft Phone Viewer, investigators can instantly access information about the suspects activities such as their calls, messages, address books and location history in a matter of minutes. You can view both existing and deleted records.
The tool is a perfect stand-alone forensic viewer and a great tool for lightweight forensic analysis.
Directly supporting password-protected offline backups produced by Apple iTunes, Elcomsoft Phone Viewer can immediately display information from encrypted backups without requiring Elcomsoft Phone Breaker or another tool to decrypt the backup first. While Elcomsoft Phone Viewer will not break an unknown password (one still has to use Elcomsoft Phone Breaker for that), pre-decrypting offline backups is not required.
The tool can display bookmarks, search and browsing history along with snapshots of opened browser tabs, media and photo libraries, offering convenient access to media galleries with large numbers of files.
Version 4.21.30097: Health: added new data in Mindfulness and Sleep categories, improved parsing speed, parsing deleted data, improved filters Messages and Media: added support for HEIC (HEIF) attachments, new filter (System) for shared locations, better processing of messages with multiple attachments And more
Version 4.0.28019: parsing Apple Pay data (associated cards and transactions) improved iOS 12 (beta) support extracting and parsing Wallet data from backups and .tar archives recover deleted messages from iOS 11/12 backups get more location data from various sources grouping media files by application
Version 3.80.27023: view SMS/iMessage data extracted from iCloud by Elcomsoft Phone Breaker added preliminary support for local (iTunes) iOS 12 (beta) backups parsing more cached locations from TAR file system images
Version 3.61: Smoother scrolling of Notes and Wallet data. Added iBooks plug-in (show file info).
Version 3.60.24142: Added support for new synced data categories (Account/used info, Apple Maps, Wi-Fi, Wallet, iBooks) Bug fixes and performance improvements
Version 3.50.23089: Added compatibility with iOS 11 backups (iCloud and iTunes) New ‘Applications’ plug-in to get details on installed programs New ‘Wi-Fi’ plug-in to get information on all wireless access point ever accessed from this device Bug fixes and performance improvements
Version 3.40: Version 3.40 adds support for the newly added types of data.
Version 3.25: EPV 3.25 has been updated to add the ability to filter deleted Safari browsing history records (from synced iCloud data).