Name: iXAM

Text: iXAM®
Zero-Footprint Forensic Acquisition for
Apple iPhon

iXAM® - an iPhone ™ and iPod Touch TM forensic imaging and
data analysis suite comprising two key applications to allow fast
and comprehensive forensic examination and reporting of live
and deleted data stored on these unique devices.
iXAM - Forensic data imaging tool: Uses a proprietary
method which requires no modification to the device
Operating System and leaves absolutely no trace on the target
device. This tool has 2 extraction modes to allow investigators
to perform the appropriate level of examination based on
importance of the device and the time available.
Forensic lmaging Mode: A full 'byte for byte ' physical memory
space image, which includes deleted data and unallocated
memory space. lncludes audit logging & MDS/SHA 1 hash
validation of every memory block.
Logica/ lmaging Mode: Allows an investigator to perform
targeted acquisition of specific key live data sets, but still using
a physical imaging technique to download the data.

iXAM iner TM - Decoding and reporting tool: Enables
investigators to interpret and present the results of a data
acquisition performed using iXAM .
Manual data carving of iPhone data is time consuming and
requires expertise and knowledge to search for case-relevant
evidence . iXAMiner automates this procedure enabling an
investigator to quickly produce a detailed and comprehensive
forensic report. Even files encoded in a proprietary Apple TM
format are decoded and presented . The software consolidates
the many different file types in to one evidence workbook,
increasing workflow rates and allowing vital data to be
presented in an easy to read and consistent format.
iXAMiner creates a Microsoft® Excel® based report suitable
for evidential submission or for exporting into other data
analysis applications.

Features of iXAM®:


'Zero-footprint' forensic imaging



No jail breaking or OS modification required



Pass code and encryption bypass



Radio Isolation (GS M, WiFi & Bluetooth)



Cable based USB data download



Full disk imaging or logical extraction



Audit logging & MDS / SHA 1 hash validation



Virtual Machine support

www.ixam-forensics.com

T : +44 (0) 1732 459 81 1 (UK)

iXAM® can typically recover the following information where
available:
Phone & User information:


ICCID/IMSI of last SIM card



IMEl/ Firmware version



Cali register with incoming / outgoing call durations



SMS / MMS messages {with media files)



Address book {including sub categories) and Speed
dials



Calendar entries, Notes and Task entries



User specified dictionary words



Voicemail (potentially everything received over the
lifetime of the handset)

E-Mai/ and Web information:


E-mails (plain text) & E-mail accounts used



Extract and reproduce e-mail attachments



Internet bookmarks (including last visited date)



Internet cookies {including websites visited and
creation/expiry time stamps)



Internet history {including active and historically viewed
web pages)



Content downloads

Media and Device information:


Still image files,Video files & Audio clips



Geo Tag data (including time/date and location - i.e.
latitude and longitude of the image)



GPS location fixes (For 3G iPhone) These include
latitude, longitude , altitude and time and date.



Map locations (latitude, longitude and search terms)



Wireless Network details (including router
IP/MAC/Subnet, domain name and last connection time)



Bluetooth pairings (including device names, MAC
addresses and PIN numbers for pairing)



Current time zone offset (not available on all firmware
versions)

• Application screen snapshots
iXAM users benefit from ongoing research and development as
FTS continues to increase device support and the range of live
and deleted data recoverable from the Apple iPhone and iPod
Touch. Regular updates and software support are included with
each seat licence.

Toll FREE : + 1 877 507 3408 (USA only)

Forenslc
Telecommunications
Services

CONTACTS
-H
PO.Box 242
Fiwends
Kent
m 1 5 6ZT
United Kingdom
T :+44 (0) 1732 459 81 1
F :+44 (0) 1 732 741 261
E :info@ForenricTS.cauk
www.ForensicTS.cauk

Forensic
Telecommunications
Services

8

8
@

r,,~bs~

Mobile Phone and SIM Cud Forensics

HEX M - F I L m Chip Level Forensics

Hi-Tech Device, SatNav and Cornputer Forensics

UNEKD KINGDOM
Warrington
T :079 19 050 945

Bristol
T :on60

~n
841

USA
T :+l (316) 361 0923
Tdl FREE +1 877 507 3408
E: askFTS@ForemiiTS.cm
www.FOrensicTS.com

Specialist Investigator TRining Services

Document Path: ["brochure511.pdf"]

e-Highlighter

Click to send permalink to address bar, or right-click to copy permalink.

Un-highlight all Un-highlight selectionu Highlight selectionh