Our unique direct extraction process offers the following benefits: There are no log entries added on the device, and absolutely no changes are made to any area of the device storage, neither in the system nor in data partitions. The new extraction method is the cleanest yet. The patching of the device is performed completely in the RAM, the data partition is mounted read-only, and the operating system installed on the device is left untouched and is not used during the boot process. Instead of deriving from the base offered by the checkra1n jailbreak, our solution is based on the checkm8 exploit. IOS Forensic Toolkit 8.0 beta for Mac offers forensically sound extraction of iPhone 5s, iPhone 6, 6 Plus, 6s, 6s Plus, and iPhone SE (1.Gen) devices with a known or empty screen lock passcode. Checkm8 extraction for select iPhone and iPad models