Elcomsoft says its iOS Forensic Toolkit can now extract some data in BFU"Before First Unlock" means a device has been powered off or rebooted, but not unlocked with the correct passcode.
What you need to know
Elcomsoft says its iOS Forensic toolkit can now extract some files whilst a device is in BFU mode.
It says it can extract select keychain records in "Before First Unlock" mode.
The device has to be jailbroken using checkra1n.
Elcomsoft says its iOS Forensic Toolkit can now extract some files from iOS devices in BFU mode before a user has even entered their passcode for the first time.
Elcomsoft's iOS Forensic Toolkit allows users who purchase it to perform physical and logical acquisition of iPhone, iPad, and iPod touch devices. It can be used to image device file systems and extract passwords, encryption keys, and data. Elcomsoft's iOS Forensic Toolkit allows users who purchase it to perform physical and logical acquisition of iPhone, iPad, and iPod touch devices. It can be used to image device file systems and extract passwords, encryption k...
Source:
Elcomsoft says its iOS Forensic Toolkit can now extract some data in BFU
