Magnet Forensics开发了新的取证工具GrayKey Preserve和Evidence Preservation Mode，声称能够规避苹果iOS系统中的自动重启功能1。苹果在2024年11月推出的这一安全机制要求iPhone在72小时内未解锁的情况下自动重启1，而Magnet Forensics的新工具则能将设备保持在便于执法部门提取数据的状态1。
该新技术通过启用飞行模式、禁用蓝牙、Wi-Fi和蜂窝信号来实现目的1，使iPhone维持在"首次解锁后"(After First Unlock)的状态，即使设备重启后也不会丢失此状态1。Magnet员工表示这是"iOS取证的绝对改变者，是我们多年来希望拥有的功能"1。相关教育视频日期为2025年初，专供执法部门使用1。研究员Jiska Classen推测Magnet可能通过操纵iPhone时钟或禁用数据过期任务来实现这一突破1。
Magnet Forensics has developed new forensic capabilities designed to circumvent Apple's automatic restart function on locked iPhones, marking the latest escalation in the ongoing technical contest between device manufacturers and law enforcement tools.1 The company created GrayKey Preserve and Evidence Preservation Mode, technologies that counter Apple's inactivity reboot feature introduced in November 2024, which automatically restarts devices that remain unlocked for 72 hours.1
The new tools work by enabling airplane mode and disabling Bluetooth, Wi-Fi, and cellular signals to maintain iPhones in a state accessible to forensic extraction.1 Rather than forcing a full device restart, the technology preserves the device in an "After First Unlock" state—a condition that persists even after reboot, preventing the security protections that normally activate when a phone has been powered down.1 An educational video demonstrating these capabilities, dated to early 2025 and distributed exclusively to law enforcement agencies, presents the advancement as transformative for digital forensics.1 According to a Magnet employee quoted in the material, "This is an absolute game changer for iOS forensics, and it's a capability we've wanted to have for years."1
Security researcher Jiska Classen has speculated that Magnet may have achieved this result by manipulating the iPhone's internal clock or disabling data expiration processes.1 The development underscores the persistent technical arms race between Apple's security innovations and the capabilities developed by commercial forensic vendors working with law enforcement agencies.
评论
还没有评论，欢迎留下第一条。