iPhone Analzyer allows you to forensically examine or recover date from in iOS device. It principally works by importing backups produced by iTunes or third party software, and providing you with a rich interface to explore, analyse and recover data in human readable formats. Because it works from the backup files everything is forensically safe, and no changes are made to the original data.
iPhone Analyzer is now free for everyone. We do not plan to continue active development in the near future. If you would like us to add specific features or fix bugs more quickly we will be happy to do so at our standard consultancy rates. Please get in touch via firstname.lastname@example.org
Download iPhone Analyzer from our project on SourceForge.
- Supports iOS 2, iOS 3, iOS 4 and iOS 5 devices
- Multi-platform (Java based) product, supported on Linux, Windows and Mac
- Fast, powerful search across device including regular expressions
- Integrated mapping supports visualisation of geo-tagged information, including google maps searches, photos, and cell-sites and wifi locations observed by the device (the infamous "locationd" data)
- Integrated support for text messages, voicemail, address book entries, photos (including metadata), call records and many many others
- Recovery of "deleted" sqlite records (records that have been tagged as deleted, but have not yet been purged by the device can often be recovered),/li>
- Integrated visualisation of plist and sqlite files
- Includes support for off-line mapping, supporting mapping on computers not connected to the Internet
- Support for KML export and direct export to Google Earth
- Browse the device file structure, navigate directly to key files or explore the device using concepts such as "who", "when", "what" and "where".
- Analyse jail broken device directly over SSH without need for backup (experimental)
You can read the manual for iPhone Analyzer Pro online.
iPhone Analyzer 2.0 alpha
- Adds heat maps for mapping
- Added support for off-line mapping
- KML support