Explore the content of local and cloud backups produced by iOS, BlackBerry 10, Windows Phone 8 and Windows 10 Mobile devices! Elcomsoft Phone Viewer is a small, lightweight tool enabling read-only access to contacts, messages, call logs, notes and calendar data located in mobile backups. In addition, the tool displays essential information about the device such as model name, serial number, date of last backup etc. Finally, the tool implements access to deleted SMS and iMessages stored in iOS backups.
Yet another “me too” forensic viewer? We looked hard for a tool we could recommend to our customers for viewing data decrypted or downloaded with Elcomsoft Phone Breaker. No single tool on the market meets our stringent requirements on speed, compatibility and ease of use. That’s why we introduced a viewing tool of our own.
Elcomsoft Phone Viewer is an ideal viewing companion for Elcomsoft Phone Breaker, enabling full support for all data formats produced by this tool. Regularly maintained and timely updated, Elcomsoft Phone Viewer is the first to receive support for the latest mobile backup formats extracted, downloaded or decrypted with other ElcomSoft tools. Using our mobile acquisition tools? Elcomsoft Phone Viewer is a perfect companion!
Note that Elcomsoft Phone Viewer can only view information stored in unencrypted, unprotected backups. Should you have a password-protected backup file, use Elcomsoft Phone Breaker to remove protection.
Since version 2.0, Elcomsoft Phone Viewer can display pictures and videos captured with the phone or saved by one of the many apps. But don’t you worry, there won’t be a big mess of thousands of images appearing in a single thumbnail gallery. The files will be automatically split into a number of categories, making it easy to discover which pictures were captured with the phone’s camera, or received as messages or attachments. A separate category filters out system and application images such as buttons, logos and splash screens.
Access EXIF information stored in the images with ease. Elcomsoft Phone Viewer displays when, where and in which lighting conditions the image was captured. Detailed camera info allows determining whether an image was captured on this device or received from another one. Looking for images captured around the time of an incident? Just specify a data range, and Elcomsoft Phone Viewer will automatically display images captured during that period based on the images’ EXIF tags.
Location information is one of the most important EXIF tags available. Elcomsoft Phone Viewer will automatically map the location where the image was taken using Google Maps. The ability to map GPS coordinates extracted from images’ EXIF metadata can become extremely handy during investigations, allowing to discover exactly when and where a particular image was captured.
Elcomsoft Phone Viewer is the perfect tool for exploring information contained in online backups downloaded from the cloud, while Elcomsoft Phone Breaker is the perfect tool for downloading mobile backups from iCloud (iOS devices), and Windows Live! (devices running Windows Phone 8/8.1 and Windows 10 Mobile).
Use Elcomsoft Phone Breaker to quickly download selective information from Apple iCloud, and review information you acquired in Elcomsoft Phone Viewer. The two tools enable investigators obtain essential information about the suspect such as their calls, messages, address books and location history in a matter of minutes.
Elcomsoft Phone Viewer is a perfect tool when time is the ultimate priority. By using Elcomsoft Phone Viewer together with other ElcomSoft tools such as Elcomsoft Phone Breaker, investigators can save time by reviewing essential bits of information in just a few moments. By quickly download selective information from Apple iCloud with Elcomsoft Phone Breaker and viewing acquired information in Elcomsoft Phone Viewer, investigators can obtain essential information about the suspect such as their calls, messages, address books and location history in a matter of minutes. The ability to view Calls and Messages databases with many thousand entries as well as convenient full-text and category-based searching and filtering make navigating through acquired information a snap.
Search through thousands records in a snap! Elcomsoft Phone Viewer offers real-time filtering and full-text searching, allowing examiners locate records of interest in a matter of seconds. Search through Contacts, Calls, Notes and Messages, look up contact by names, numbers and other available fields, and locate messages with full-text search.
With real-time filtering, you can opt to only display favorite contacts or only display contacts from one or more accounts (Exchange, iCloud, Google, Facebook, or any combination). For messages, you can specify date range, type of message (SMS, MMS, iMessage) and whether to display incoming, outgoing or all messages.
Viewing Mobile Backups
Elcomsoft Phone Viewer is a fast, compact tool that requires no learning curve. Using Elcomsoft Phone Viewer is just as easy as viewing an Excel spreadsheet. Designed to simplify the entry into mobile forensics, Elcomsoft Phone Viewer offers more than enough features for many IT security departments, offices and one-off investigations.
Elcomsoft Phone Viewer enables access to the following information:
For iOS device backups, Elcomsoft Phone Viewer can work with ones in original iTunes format, and with converted/restored file names. Partial backups (if only selected categories have been downloaded from iCloud) are also supported.
Elcomsoft Phone Viewer supports information saved to local or cloud backups by all of the following devices:
Apple iOS 6.x to 9.x (iTunes and iCloud backups):
Windows Phone 8/8.1 and Windows 10 Mobile
This software is not reviewed yet.
Perform logical acquisition of mobile devices running Apple iOS, Windows Phone, Windows 10 Mobile and BlackBerry 10. Retrieve information remotely via iCloud with or without Apple ID and password, decrypt iOS backups and FileVault 2 volumes.
Download, view and decrypt WhatsApp histories from Android and iOS phones. The tool automatically acquires WhatsApp databases from a range of local and cloud sources, processes information and displays contacts, messages, call history and pictures.
Elcomsoft Blackberry Backup Explorer grants forensic access to information stored in BlackBerry backups produced with BlackBerry Desktop Software. Access call logs, email, SMS and MMS messages, as well as organizer information.
Unlock password-protected Microsoft Office documents with the help of your video card. Remove, replace or recover passwords protecting documents created with any product or version of Microsoft Office from version 2.0 to the latest Office 2010.
Audit security of your wireless networks and recover WPA/WPA2 with patent-pending GPU acceleration technology that speeds up password recovery if one or more compatible NVIDIA or ATI video cards are installed.