Elusive Data digital forensics training

Backup2FS.Recover and normalize files from iOS backups.

Free Tool

A free tool that help you extract and restructure data from iOS backups

Backup2FS makes iOS backups clear and usable by converting raw, layered data into a logical file system. It preserves integrity with MD5, SHA-1, and SHA-256 checks, giving forensic professionals the structure and transparency needed for fast, reliable analysis. The result is simpler navigation, quicker workflows, and stronger reporting. Backup2FS is completely free and available to the community.

From backup chaos to file system​

Backup2FS 3.0 is out. Free tool, new release, easier backup review.

Backup2FS now supports encrypted backups end to end. Enter the iTunes or Finder backup password, and Backup2FS decrypts the backup, normalizes it into a browsable file system and keeps a decrypted copy alongside the output. This release also brings a redesigned dark interface, clearer forensic-grade logging, selectable hash algorithms, read-only handling of the source Manifest.db, improved large-file reliability and a self-contained Windows installer.

A free tool that help you extract and restructure data from iOS backups.

Device Insight at a Glance
View key device information including device name, model, iOS version, serial number, UDID and IMEI.
Installed App Inventory
See which applications were present on the device when the backup was created.
Customizable Hashing Support
Verify file integrity using MD5, SHA1 or SHA256 hash algorithms.
Process Management Controls
Pause, resume or cancel the normalization process when needed.
Immediate Access to Normalized Output
Open the reconstructed file system as soon as processing is complete.

Download Backup2FS 3.0

digital forensics tools

Forensic tools that fill the missing pieces

make the invisible visible

Elusive Data Firefly. Don't let missed app evidence determine the outcome.

One forensic workspace for app data investigations, built on provenance. Recover, interpret, validate and report evidence across SQLite, RealmDB, LevelDB, IndexedDB and Apple Biome / SEGB, with every finding traceable back to its source.

Discover Firefly
varint decoding made easy

VarInt Calculator.
A tool for calculating and decoding VarInts.

Instantly decode variable-length integers from SQLite databases, identifying the lengths of cells, strings, and blobs. This utility converts varint hex values to decimal in seconds, perfect for analyzing app databases and parsing records for accurate serial type decoding.

Download on the App Store badge — get the Elusive Data forensics app for iOS
stay updated

Stay in the loop. Sign up for our monthly newsletter.

Be the first to hear about new training opportunities, new tools and updates, case-based blog posts, and practical insights. Our monthly newsletter is built to help you learn faster, solve cases smarter, and keep up in a field that never stands still.

Fill in your email to sign up.