Practical Mobile Forensics - Fourth Edition

Extracting iCloud backups

Online backups stored on the iCloud are commonly retrieved when the original iOS device is damaged, upgraded, or lost. To extract a backup from iCloud, you must know the user's Apple ID and password. With the known Apple ID and password, you can log on to https://www.icloud.com/ and get access to contacts, notes, emails, calendars, photos, reminders, and more. You can also use forensic tools to extract data from iCloud. For example, you can use Belkasoft Acquisition Tool, a free tool from Belkasoft that can be downloaded from: https://belkasoft.com/get.

To extract the iCloud data, perform the following steps:

1. Launch Belkasoft Acquisition Tool.
2. Choose the Cloud option.
3. Choose iCloud.
4. Type the Apple ID login and ...