Elcomsoft iOS Forensic Toolkit 8.61 is a maintenance release that addresses compatibility issues during checkm8 extractions for newly released versions of iOS. In addition, we fixed agent-based extraction support for Apple Silicon based iPad Pro models equipped with 16GB of RAM.

The update to Elcomsoft iOS Forensic Toolkit 8.61 brings several improvements to bootloader-level checkm8 extractions, adding support for iOS 15.8.3 and iOS 16.7.10 for both macOS & Linux editions. In addition, we addressed a compatibility issue when running agent-based extractions on high-end iPad Pro models equipped with 16GB of RAM.

Key Fixes and Enhancements

checkm8 extractions now support iOS 15.8.3 and iOS 16.7.10. The update adds official support for these two iOS builds, correctly identifying the version numbers and providing the correct link to download firmware (a requirement during checkm8 extraction).

Support for high-capacity iPads: the most significant update involves fixing agent-based extractions for iPad Pro models with 1TB and 2TB storage capacities. These devices, which feature 16GB of RAM instead of the usual 8GB, previously encountered issues when running the extraction agent. This release resolves those issues, ensuring seamless operation with these configurations.

Finally, starting with this release, iOS Forensic Toolkit outputs extended product version information, which includes version and build number. This extended output aims for easier troubleshooting across builds.

iOS Forensic Toolkit 8.61 release notes

• checkm8: added support for iOS 15.8.3 (macOS & Linux versions)
• checkm8: added support for iOS 16.7.10 (macOS & Linux versions)
• agent: fixed support for iOS 16 on some iPad Pro models (Apple Silicon, 16GB RAM)
• extended product version information (such as version and build) output for easier troubleshooting across builds