We’re excited to share Backup2FS — a free tool built to make iOS backup analysis faster and more intuitive, developed by our CEO and Lead Trainer, James Eichbaum.
Backup2FS simplifies the forensic analysis of iOS backup data by normalizing backups into a familiar file system structure, making it faster and easier to locate key artifacts.
Originally created to streamline James’ own workflow when analyzing iOS backups, Backup2FS is now freely available to the digital forensics community. The tool is already gaining recognition, having been recently highlighted in Forensic Focus’ Digital Forensics Round-Up (April 2025).
What Backup2FS Does:
- Extracts Key Device Information: Displays device name, model, iOS version, serial number, unique device ID, and IMEI.
- Lists Installed Applications: Provides a clear overview of apps installed at the time of backup.
- Offers Flexible Hashing Options: Supports MD5, SHA1, and SHA256 to validate file integrity.
- Process Control: Allows pausing, resuming, or canceling the normalization process as needed.
- Instant Access to Output: Quickly open the normalized file system upon completion.
The value of using Backup2FS
Navigating the complex domain structure of iOS backups can slow down investigations. Backup2FS addresses this by presenting a clean, organized file system view — helping forensic examiners, mobile analysts, and incident responders work faster and more intuitively.
Get Backup2FS:
The tool is open and free for anyone to use.
You can download Backup2FS here:
About James Eichbaum:
Backup2FS was developed by James Eichbaum, CEO and Lead Trainer at Elusive Data. James brings decades of hands-on experience in digital forensics, mobile investigations, and global training. As a former law enforcement examiner and Global Training Manager at MSAB, he has trained thousands of forensic professionals across more than 30 countries — from local agencies to national labs.
Having led real-world investigations and testified in court, James understands the challenges forensic examiners face. His tools and training are designed to be practical, efficient, and focused on solving real investigative problems — not just following automated outputs.
Backup2FS reflects that philosophy: making complex data easier to access, understand, and act on during forensic examinations.
