Elcomsoft Phone Viewer

Elcomsoft Phone Viewer is a fast, lightweight forensic viewer for quickly accessing information extracted from mobile backups. Supporting a variety of platforms and data formats, the tool can display information extracted from local and cloud iOS, Windows Phone 8.x, Windows 10 Mobile and BlackBerry 10 backups. Password-protected iTunes backups can be automatically decrypted and analyzed without using third-party tools.

Elcomsoft Phone Viewer is a perfect companion for the range of ElcomSoft mobile forensic tools, offering the ability to view information extracted via physical, logical or over-the-air acquisition. Elcomsoft Phone Viewer supports all types of backups and synced data pulled from a variety of local and cloud sources.

In addition to iCloud backups, Apple syncs call logs, browsing history and Safari open tabs, notes, calendars and contacts are synced in nearly real time via iCloud. By pulling synced information from Apple iCloud with Elcomsoft Phone Breaker and viewing acquired information in Elcomsoft Phone Viewer, investigators can instantly access information about the suspects activities such as their calls, messages, address books and location history in a matter of minutes. You can view both existing and deleted records.

The tool is a perfect stand-alone forensic viewer and a great tool for lightweight forensic analysis. Directly supporting password-protected offline backups produced by Apple iTunes, Elcomsoft Phone Viewer can immediately display information from encrypted backups without requiring Elcomsoft Phone Breaker or another tool to decrypt the backup first. While Elcomsoft Phone Viewer will not break an unknown password (one still has to use Elcomsoft Phone Breaker for that), pre-decrypting offline backups is not required.

The tool can display bookmarks, search and browsing history along with snapshots of opened browser tabs, media and photo libraries, offering convenient access to media galleries with large numbers of files.