iOS Forensics Tools - santoku/Santoku-Linux GitHub Wiki

Imaging tools

• Lantern Lite - https://github.com/KatanaForensics/LanternLite

Extraction and Analysis tools

• libimobiledeivce - http://www.libimobiledevice.org/
• Backup Analyzer - http://ipbackupanalyzer.com/
• CFAbsoluteTimeConverter - http://hsoienterprises.com/software/cfabsolutetimeconverter/
• iRecovery - Determine iOS version via Recovery mode (when device is locked)
• keychain_dumper (Jailbroken devices only) - https://github.com/ptoomey3/Keychain-Dumper
• class-dump-z - https://code.google.com/p/networkpx/wiki/class_dump_z
• data_protection (http://code.google.com/p/iphone-dataprotection/)