Audience

Digital forensic examiners, law enforcement, legal teams, mobile forensics labs and smaller forensic firms

About Sherlock Forensics iPhone and iPad Analyzer

Sherlock Forensics iPhone and iPad Analyzer is Windows software for acquiring and examining iPhone and iPad evidence through logical MobileBackup2 backups. It also analyzes Cellebrite UFED and Inseyets full-filesystem extractions created with separate acquisition tools. The application runs fully offline and does not modify evidence. It decrypts encrypted backups and organizes data into more than 200 searchable artifact views for messages, calls, contacts, Safari history, Apple Notes, Maps and other app data. The free edition previews 25% of each artifact view, capped at 100 rows. The Forensic Edition adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, a raw SQLite browser, file extraction and screen capture. It can flag deleted records recovered from the examined data. Users include digital forensic examiners, investigators, law enforcement, legal teams and forensic labs that review and document mobile-device evidence.

Other Popular Alternatives & Related Software
Android Acquirer
Android Acquirer
Android Acquirer is desktop software for consent-based logical acquisition and examination of Android phones and tablets. It connects through Android Debug Bridge (ADB) and a helper application to collect selected device data, including messages, contacts, call records, media, apps and artifacts. Examiners can review extracted records, preserve acquisition details and produce forensic PDF reports with chain-of-custody information and SHA-256 hashes. The software is intended for digital forensic examiners, law-enforcement and legal teams, corporate investigators and other professionals handling authorized device examinations. A free edition supports device detection and inventory checks; the Forensic Edition adds full extraction and reporting. Windows and Linux downloads are offered. It supports examiners who need documented, repeatable workflows for consent-based mobile-device investigations.
Learn more
Belkasoft X
Belkasoft X
Belkasoft X Forensic (Belkasoft Evidence Center X) is a flagship tool by Belkasoft for computer, mobile, drone, car, and cloud forensics. It can help you to acquire and analyze a wide range of mobile and computer devices, run various analytical tasks, perform case-wide searches, bookmark artifacts, and create reports. Belkasoft X Forensic acquires, examines, analyzes, and presents digital evidence from major sources—computers, mobile devices, RAM, cars, drones, and cloud services—in a forensically sound manner. If you need to share the case details with your colleagues, use a free-of-charge portable Evidence Reader. Belkasoft X Forensic works out of the box and can be easily integrated into customer workflows. The software interface is so user-friendly that you can start working with your cases right after the Belkasoft X Forensic deployment.
Learn more
FTK Forensic Toolkit
FTK Forensic Toolkit
(1 Rating)
Zero in on relevant evidence quickly, conduct faster searches and dramatically increase analysis speed with FTK®, the purpose-built solution that interoperates with mobile device and e-discovery technology. Powerful and proven, FTK processes and indexes data upfront, eliminating wasted time waiting for searches to execute. No matter how many different data sources you’re dealing with or the amount of data you have to cull through, FTK gets you there quicker and better than anything else. FTK uses distributed processing and is the only forensics solution to fully leverage multi-thread/multi-core computers. While other forensics tools waste the potential of modern hardware solutions, FTK uses 100 percent of its hardware resources, helping investigators find relevant evidence faster. Since indexing is done up front, filtering and searching are completed more efficiently than with any other solution.
Learn more
EnCase Forensic
EnCase Forensic
The Gold Standard in Forensic Investigations – including Mobile Acquisition. Improve investigation efficiency with the release of optical character recognition (OCR) support that seamlessly extracts embedded text from scanned images, documents and PDFs as part of the evidence collection workflow. 21.2 also expands social media artifact support and includes an enhanced workflow with a new summary view that allows users to cross-reference disparate artifact types, significantly improving evidence processing workflows. OpenText Security (formerly Guidance Software) created the category for digital investigation software with EnCase Forensic in 1998. EnCase has maintained its reputation as the gold standard in criminal investigations and was named the Best Computer Forensic Solution for eight consecutive years by SC Magazine. No other solution offers the same level of functionality, flexibility, and has the track record of court-acceptance as EnCase Forensic.
Learn more

Pricing

Starting Price:
$599 one-time
Pricing Details:
The free edition previews a portion of the available artifacts. The Forensic Edition is a one-time $599 USD license and adds unlimited data, global search, CSV and JSON export, a court-ready HTML report, raw SQLite browsing, and file extraction.
Free Version:
Free Version available.

Integrations

See Integrations

Ratings/Reviews

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Company Information

Sherlock Forensics
Founded: 2006
Canada
www.sherlockforensics.com/pages/sherlock-forensic-iphone-analyzer.html

Videos and Screen Captures

Sherlock iOS Acquire page showing an in-progress iPhone evidence capture with progress bar, captured size, throughput, file count, and completion percentage.

Sherlock iOS Acquire page showing an in-progress iPhone evidence capture with progress bar, captured size, throughput, file count, and completion percentage.

Sherlock iOS Acquire page showing an in-progress iPhone evidence capture with progress bar, captured size, throughput, file count, and completion percentage. Activity Timeline view with artifact-type filters, activity-by-hour chart, export controls, and timestamped location and permission events. Sherlock iOS Safari & Web page listing browsing-history entries with dates, page titles, URLs, and visit counts. Sherlock iOS desktop application on the Acquire page, showing a connected iPhone and steps to choose a backup folder and acquire a logical backup. Deleted & Hidden analysis page listing recently deleted photo records with filenames and timestamps.
Other Useful Business Software
Demo Series - Small Business Backup By Veeam Icon
Demo Series - Small Business Backup By Veeam

Learn how to protect your Microsoft 365 data, with simple, actionable tips today.

Watch this on-demand demo series and learn how to protect your Microsoft 365 data with clear, simple, actionable steps that are easy to implement for businesses of all sizes.
Watch Demo Series

Product Details

Platforms Supported
Windows
On-Premises
Training
Documentation
Support
Phone Support
Online

Sherlock Forensics iPhone and iPad Analyzer Frequently Asked Questions

Q: What kinds of users and organization types does Sherlock Forensics iPhone and iPad Analyzer work with?
Q: What languages does Sherlock Forensics iPhone and iPad Analyzer support in their product?
Q: What kind of support options does Sherlock Forensics iPhone and iPad Analyzer offer?
Q: What other applications or services does Sherlock Forensics iPhone and iPad Analyzer integrate with?
Q: What type of training does Sherlock Forensics iPhone and iPad Analyzer provide?
Q: How much does Sherlock Forensics iPhone and iPad Analyzer cost?

Sherlock Forensics iPhone and iPad Analyzer Product Features