ElcomSoft

ElcomSoft's Official Twitter. Password recovery, mobile & cloud forensics.

[ElcomSoft @ElcomSoft]

Downloading iPhone and iPad backups from Apple iCloud https://t.co/QHjQDrdRjd #dfir #icloud

[ElcomSoft @ElcomSoft]

Low-Level Extraction for iOS 17 and 18 https://t.co/JsAGz4gvcT #dfir #apple #ios

[ElcomSoft @ElcomSoft]

Every day in every way, #passwords are getting worse and worse https://t.co/JFtV7MsSbY

[ElcomSoft @ElcomSoft]

@oxygenforensic If you are not yet aware, Oxygen Forensics Detective is completely developed in Russia, despite the fact that it is marketed as "truly American". In fact, the IP belongs to the offshore company registered in Cypгus, while the owners of that Cyprus company are citizens of Russia.

[ElcomSoft @ElcomSoft]

Eighteen years ago, before “GPU acceleration” and “AI data center” became household terms, a small hi-tech company changed the rules of cryptography #dfir

https://t.co/xM9R5kKSyG

[ElcomSoft @ElcomSoft]

Most real-world passwords aren’t random – they follow the owner’s habits, preferences, and personal history. This article explains how to transform user data into a focused attack strategy https://t.co/UBgRBJGmrE #dfir #passwords

[ElcomSoft @ElcomSoft]

Password Managers: Security, Risks, and Forensic Implications https://t.co/PNjYDXPxu4 #dfir #passwords

[ElcomSoft @ElcomSoft]

Big news is coming – and this time, it’s from the living room. Our team has successfully extracted a complete file system image from an Apple TV 4K running tvOS 26 https://t.co/PqrXqSRww1 #dfir

[ElcomSoft @ElcomSoft]

Elcomsoft System Recovery, a powerful digital triage tool, is updated with support for the newest Windows Server 2025 ntds.dit database, BitLocker key exporting, advanced data export capabilities, and improved disk imaging https://t.co/cCVMxH6OWH #dfir

[ElcomSoft @ElcomSoft]

Our customers often ask us which exact iOS versions are supported by iOS Forensic Toolkit. There’s always a temptation to answer “all of them,” and while that answer is technically correct, there are a lot of caveats. The devil is in the details https://t.co/ETxck4wZfP #dfir

[ElcomSoft @ElcomSoft]

Many large-scale breaches have started from simple oversights: unpatched systems, missing 2FA, or weak passwords. This article reviews major incidents caused by such failures and outlines practical steps to avoid becoming the next Louvre.
https://t.co/Fb1YVDvdfN #dfir

[ElcomSoft @ElcomSoft]

The latest update to iOS Forensic Toolkit brought bootloader-level full file system and keychain extraction to a bunch of old iPads, Apple TVs and first-gen HomePod running OS versions 17 and 18 https://t.co/Gov52lTnsW #dfir

[ElcomSoft @ElcomSoft]

It’s better to connect external USB-C
devices to a USB-C port (USB 3.2 Gen2 or faster). But if you’re limited to USB-A connection, you need a USB C to A cable, and choose the right one very carefully — and that’s not the only thing that matters https://t.co/c8riXmoYp1

[ElcomSoft @ElcomSoft]

Some time ago, we tested NVMe disk imaging performance, focusing mainly on software. This time, we turned our attention to hardware connections: which ports deliver the best results, and whether using a USB hub affects imaging speed and reliability. https://t.co/0hOA9P4f0S #dfir

[ElcomSoft @ElcomSoft]

How the latest build of iOS Forensic Toolkit can pull Unified Logs directly from an iPhone or iPad during advanced logical extraction https://t.co/jaZhtM6uTA #dfir

[ElcomSoft @ElcomSoft]

When an iPhone is seized and later re-examined, forensic teams sometimes find that data present in an earlier extraction are missing from a subsequent backup or filesystem image. What kinds of data are affected and how long do they usually live? https://t.co/E8iE42kzX3 #dfir

[ElcomSoft @ElcomSoft]

The latest update of EDPR can now attack master passwords protecting databases from Bitwarden, Dropbox Passwords, Enpass, Kaspersky, Keeper, Roboform, Sticky Password, and Zoho Vault password managers https://t.co/JblnzMhPuI

[ElcomSoft @ElcomSoft]

Apple Face ID: Security Implications and Potential Vulnerabilities https://t.co/Lopnzl2px0 #dfir

[ElcomSoft @ElcomSoft]

Apple Watch S0 forensics: cracking the passcode, full physical acquisition https://t.co/cmG5DRa9Jv #dfir

[ElcomSoft @ElcomSoft]

We previously tested disk imaging speeds using high-performance storage devices. But raw speed is only part of the equation. In this article, we explore the key reasons why both speed and accuracy can fall short during disk imaging. https://t.co/99VlCwPpfP #dfir