OAuth Token Acquisition
Definition
Cloud-extraction technique where a tool authenticates to the provider using the user's account credentials or a refresh token extracted from the phone, then pulls cloud data through the provider's own API. Used by Elcomsoft Phone Breaker, Magnet AXIOM Cloud, Oxygen Forensic Cloud Extractor and E3 Forensics.
Related terms
- Advanced Data Protection (ADP)
- Apple's opt-in feature since iOS 16.2 (December 2022 in US, global by iOS 16.3) that extends end-to-end encryption to iCloud Backup, iCloud...
- Android Auto Backup
- The Android 6.0+ mechanism that uploads app data to the user's Google Drive automatically (up to 25 MB per app), alongside SMS,...
- BNSS Section 91
- Bharatiya Nagarik Suraksha Sanhita 2023 Section 91 (successor to CrPC 1973 Section 91) lets a court or officer in charge of a...
- iCloud Backup
- A daily encrypted snapshot of an iPhone or iPad stored in Apple's cloud. Includes app data the developer marks for backup, device...
- MLAT
- Mutual Legal Assistance Treaty. The formal mechanism for cross-border evidence requests. India has bilateral MLATs with over 40 countries including the US,...
- TCC.db
- Transparency, Consent and Control database at /var/mobile/Library/TCC/TCC.db on iOS. Records which apps the user has granted access to camera, microphone, photos, contacts,...
Explained in
- Mobile Cloud and Backup Forensics: iCloud and Google DriveCloud-extraction technique where a tool authenticates to the provider using the user's account credentials or a refresh token extracted from the phone, then pu...