In mobile forensics, an is a unique identifier assigned to a specific extraction session from an Apple device (iPhone, iPad, iPod touch). It is generated by forensic software (e.g., Cellebrite UFED, Magnet AXIOM) when a logical, file system, or physical extraction is performed.
: Specialized labs use tools like airdrop-keychain-extractor to specifically target Apple ID credentials stored in the macOS/iOS keychain. extractor id apple