It is possible to extract data from the memory chip, but it will be encrypted and its decryption is a sophisticated problem.įollowing the development of mobile forensics, you can see that the mobile devices analysis programs developed in parallel with the functionality of mobile devices. However, the widespread use of user data encryption in top models by the mobile device manufacturers has led to the fact that this solution is gradually losing relevance. For example, a set of adapters for data extraction from memory chips that are usually used in "Chinese mobile phones". Rusolut provides a several sets of adapters for data extraction from certain mobile device models. Using the device, we can extract data from damaged mobile devices or from mobile devices locked with the PIN-code or picture password. The practice has shown that these products are good for data extraction from obsolescent mobile devices.įrom a certain moment, hardware tools for chip-off (method of data extraction directly from a mobile device's memory chip) designed by the Polish company Rusolut became popular. The products have form of tablet and kiosk. The company also offers hardware products MSAB XRY Field and MSAB XRY Kiosk, which are designed for data extraction from mobile devices. The product is supplied with the brand USB-hub that has recognizable appearance, a set of adapters, and data-cables for connecting different mobile devices. Unlike the Cellebrite paradigm, Micro Systemation suggests that in most cases their products will be used on desktop computers or laptops. MSAB XRY / MSAB XRY Field is an analogue of Cellebrite products developed by the Swedish company Micro Systemation. That is why we recommend to check that the data analysis conducted by the UFED Physical Analyzer was done completely. This is due to the old bags that were sort of fixed in new versions of the program but they occur. Some of the data may be lost by the UFED Physical Analyzer program during the analysis. As for today, this complex provides data extraction from as many mobile devices as possible. The laboratory version of the product is two independent software products - UFED 4PC and UFED Physical Analyzer - installed on the digital forensic analyst's computer. The concept of usage of this equipment assumes that a digital forensic analyst extracts data in the field with the help of Cellebrite UFED Touch 2 and then in the laboratory analyzes them using the UFED Physical Analyzer.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |