OAuth token acquisition
Cloud-extraction technique where a tool authenticates to the provider using the user's account credentials or a refresh token extracted from the phone, then pulls cloud data through the provider's own API. Used by Elcomsoft Phone Breaker, Magnet AXIOM Cloud, Oxygen Forensic Cloud Extractor and E3 Forensics.