Elcomsoft Phone Viewer Forensic Edition 4.51 Build 33506 專業的多媒體分類管理軟件 ElcomsoftPhoneViewerForensicEdition是一款專業的多媒體分類管理軟件,軟件可以顯示手機拍攝的照片和視頻,也可以保存在許多應用程序中。但是不要擔心,在一個縮略圖圖庫中不會出現成千上萬的圖片,這些文件將被自動分成多個類別。軟件自動管理照片視頻分類,根據時間地點排序,非常方便的一款媒體管理工具。 AnalyzeinformationextractedwithElcomSoftandthird-partyacquisitiontoolswithafast,lightweightviewer.DecryptandviewiOSbackupsandsynceddata,analyzeiCloudPhotoLibrary,BlackBerry10backupsandWindowsPhone/Windows10Mobiledataandaccesssynchronizeddatawithease. Newfeatures: HealthData Healthdatacanbecomeanessentialpieceofevidence.Heartrate,sleepinghabits,workouts,stepsandwalkingroutinesarejustafewthingsthatcometomindspeakingofAppleHealth.ElcomsoftPhoneBreakercanremotelyextractsyncedHealthdatafromiOSdevicesfromtheuser'siCloudaccount,whileElcomsoftPhoneViewercanhelpviewingandanalyzingHealthdata. TARAnalysis SincetheintroductionoftheiPhone5s,Apple’sfirst64-bitiPhone,physicalacquisitionisexclusivelyavailableviafilesystemimaging.Regardlessofthetoolperformingphysicalacquisition(ElcomsoftiOSForensicorthird-partytools),theresultoftheseeffortsisalwaysaTARarchivecontaininganimageofthedevice’sfilesystem.ElcomsoftPhoneViewerisalightweightandconvenienttooltoquicklyanalyzeevidencefoundintheresultsofphysicalacquisition. MessageAttachmentsiniCloud:MediaFilesandDocuments ThelastversionofElcomsoftPhoneBreakeraddssupportformessageattachmentssuchasmediafiles,documentsandotherfiles,whileElcomsoftPhoneViewerallowsanalyzingmessagesandattachmentsobtainedfromiCloud.AnalyzingmediafilesandEXIFtagscanhelpobtainmassiveamountsoflocationdataaswellasotheressentialevidence. ExplorethecontentoflocalandcloudbackupsproducedbyiOS,BlackBerry10,WindowsPhone8andWindows10Mobiledevices!ElcomsoftPhoneViewerisasmall,lightweighttoolenablingread-onlyaccesstocontacts,messages,calllogs,notesandcalendardatalocatedinmobilebackups.Inaddition,thetooldisplaysessentialinformationaboutthedevicesuchasmodelname,serialnumber,dateoflastbackupetc.Finally,thetoolimplementsaccesstodeletedSMSandiMessagesstorediniOSbackups. APerfectViewingCompanion Yetanother“metoo”forensicviewer?WelookedhardforatoolwecouldrecommendtoourcustomersforviewingdatadecryptedordownloadedwithElcomsoftPhoneBreaker.Nosingletoolonthemarketmeetsourstringentrequirementsonspeed,compatibilityandeaseofuse.That’swhyweintroducedaviewingtoolofourown. ElcomsoftPhoneVieweristheidealviewingcompanionforElcomsoftPhoneBreaker,enablingfullsupportforalldataformatsproducedbythistool.Regularlymaintainedandtimelyupdated,ElcomsoftPhoneVieweristhefirsttoreceivesupportforthelatestmobilebackupformatsextracted,downloadedordecryptedwithotherElcomSofttools.Usingourmobileacquisitiontools?ElcomsoftPhoneViewerisaperfectcompanion! NotethatElcomsoftPhoneViewercanonlyopenunencryptedbackupsaswellasiTunesbackupswithaknownpassword.Shouldyouhaveabackupfileencryptedwithanunknownpassword,useElcomsoftPhoneBreakertorecoverthepassword. AnalyzesOnlineActivities ElcomsoftPhoneViewerdisplaystheuser'sonlineactivitiesincludingWebbrowsinghistoryandsearchqueries,browserbookmarksandopenedtabsincludingpagesnapshots.InformationaboutrecentsearchqueriesandlastvisitedWebsitesalreadyhelpedsolvemultiplecases,andwillundoubtedlyhelpinvestigatingcrime. AccesstoSyncedData,PasswordsandMessages Informationsuchascalllogs,contacts,notes,calendarsaswellasWebbrowsingactivitiesincludingSafarihistory(includingdeleteditems),bookmarksandopentabscanbesyncedwithAppleservers.UnlikeiCloudbackupsthatmayormaynotbecreatedondailybasis,syncedinformationispushedtoAppleserversjustminutesafterthecorrespondingactivityhastakenplace.Onceuploaded,synceddatacanberetainedformonthswithisnooptionfortheendusertoclearthedataordisablethesyncing. Synchronizedrecordscanbeobtainedforextendedperiodsoftime;muchlongerthanavailableiniOSdevicesanddevicebackups.Existinganddeletedrecordsareobtained,andfiltercanbeappliedtoonlydisplaydeletedrecords. ElcomsoftPhoneViewerisElcomSoft'sstocktoolforviewingsynceddataextractedfromAppleiCloudwithElcomsoftPhoneBreaker.Еhefollowingtypesofsynceddatacanbeviewed: MessagesiniCloud:completewithattachedmediafilesanddocuments Safari(browsinghistory,bookmarks,tabsopenedonuser'sdevices) Calendars,notes,contacts Calllogs(informationaboutcallsmadeandreceived) AppleMaps(routes,places,searches) Wi-Fi(wirelessaccesspoints,MACaddresses,dateanddeviceadded) Wallet(everythingexceptpaymentdata) Accountinfo(comprehensiveinformationabouttheuseranddevicesregisteredontheAppleIDaccount) MultimediaGallery ElcomsoftPhoneViewercandisplaypicturesandvideoscapturedwiththephoneorsavedbyoneofthemanyapps.Butdon’tyouworry,therewon’tbeabigmessofthousandsofimagesappearinginasinglethumbnailgallery.Thefileswillbeautomaticallysplitintoanumberofcategories,makingiteasytodiscoverwhichpictureswerecapturedwiththephone’scamera,orreceivedasmessagesorattachments.Aseparatecategoryfiltersoutsystemandapplicationimagessuchasbuttons,logosandsplashscreens.Albumviewisavailabletoallowyoubetternavigatethroughthousandsofimages. AggregatedLocations Multiplesourcesoflocationdatamaybeavailableinagivenbackuporimage.Locationdatamaybefoundincalendarevents,iMessageattachments,mapcachesandsystemlogs.GeolocationisoneofthemostimportantEXIFtagsavailable.ElcomsoftPhoneViewerwillautomaticallyextractlocationdatafrommultiplesources,andmapthelocationswithGoogleMaps.TheabilitytomapGPScoordinatesextractedfrommultiplesourcescanbecomeextremelyhandyduringinvestigations. TARImages:TheiOSFileSystem SincetheintroductionoftheiPhone5s,Apple’sfirst64-bitiPhone,physicalacquisitionhasneverbeenthesame.ForalliPhoneandiPaddevicesequippedwithApple’s64-bitprocessors,physicalacquisitionisexclusivelyavailableviafilesystemimaging.Theimagingisperformedonthedeviceitselfinordertobypassfull-diskencryption.Regardlessofthetoolperformingphysicalacquisition,theresultoftheseeffortsisalwaysaTARarchivecontaininganimageofthedevice’sfilesystem.ElcomsoftiOSForensicToolkitproducesTARfilesastheresultofthe“F”(FileSystem)command. Upuntilnow,mosttoolsavailableforanalyzinginformationinsidetheseTARimageswereintegralpartsoffully-featuredforensictoolkits.Theexpert'schoicewouldbelimitedtoeithertime-consumingandlabour-intensivemanualanalysisrequiringahighlevelofexpertise,orahighlysophisticatedandcomplexforensicsuite,withnothinginbetween.ElcomsoftPhoneVieweroffersthelightweightandconvenientthirdoption,enablingfastandeasyanalysisofevidencefoundintheresultsofphysicalacquisition.........