Practical Mobile Forensics - Third Edition
by Rohit Tamma, Oleg Skulkin, Heather Mahalik, Satish Bommisetty
Extracting iCloud backups
Online backups stored on the iCloud are commonly retrieved when the original iOS device is damaged, upgraded, or lost. To extract a backup from iCloud, you must know the user's Apple ID and password. With the known Apple ID and password, you can log on to https://www.icloud.com/ and get access to contacts, notes, email, calendar, photos, reminders, and more. To extract the complete backup from iCloud, you can use Elcomsoft Phone Breaker. As iCloud is not the fastest cloud storage service, downloading a large backup with Elcomsoft Phone Breaker can take hours and may not be successful. To speed up the investigation, the tool provides an option to download selected files.
To extract the iCloud backup, perform the following ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access