There are multiple options built into Cellebrite UFED when completing iOS data collection. A logical or partial data collection is for when you only have consent or legal authority to collect specific items. Under Advanced Logical, there are multiple options to get the most information:

  1. Full File System (checkm8) – provides the most information
  2. Full File System – if you have a device that has already been jailbroken
  3. File System – advanced logical, which is a common data collection method most are familiar with

After ensuring that you trust the device and following the data collection instructions provided, you will be presented with a screen that tells you if the device is already encrypted.

It is crucial to ensure that it says “Encrypted” and if not, to enable the UFED feature of generating a temporary passcode. This ensures that you are able to collect the most information from the device as possible.

Share this post