±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36296
New Yesterday: 0 Visitors: 195

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Search found 108 matches

Re: iphone x passlock code from itunes backup

Post Posted: Jul 04, 19 20:40

In non-encrypted backups the keychain is encrypted with a hardware specific key that cannot be broken.

BTW wondershare is not a forensic software
Thomass30
Topic: iphone x passlock code from itunes backup
Replies: 7
Views: 3064
 

Re: deleted facebbok messages ( facebook messenger ) !!

Post Posted: Jun 13, 19 06:24

Look at threads_db2 database
Thomass30
Topic: deleted facebbok messages ( facebook messenger ) !!
Replies: 11
Views: 3604
 

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 12, 19 17:22

I agree that the iOS file system extraction is in fact just logical acqusition. (4 and later)
I was using term 'physical' in content of iOS just because I was using Elcomsoft iOS forensic toolkit and ...
Thomass30
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 6450
 

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 12, 19 10:31

What I mean by physical is that
- on 32 bit Jailbroken devices (iPhone 4s, 5 and 5c) we can get the entire DMG image of the device (unencrypted system partition and encrypted user data partition) wit ...
Thomass30
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 6450
 

Re: IOS Mobile Forensic with Axiom and Oxygen

Post Posted: Apr 11, 19 13:23

[quote="mcman"] No physical acquisitions after iPhone 4. [/quote]

Correct me if I'm wrong but I think that full physical acquisition could be done for iPhone 4s, 5 and 5c
There is no full physical ...
Thomass30
Topic: IOS Mobile Forensic with Axiom and Oxygen
Replies: 12
Views: 6450
 

Re: Samsung SM-G800F pattern lock and disabled USB debugging

Post Posted: Mar 11, 19 08:02

If this is European version it should has unlocked bootloader so it shouldnt be a problem to get physical dump.
Thomass30
Topic: Samsung SM-G800F pattern lock and disabled USB debugging
Replies: 6
Views: 1591
 

Re: Nokia Lumia whatsapp

Post Posted: Feb 28, 19 18:26

I think Cellebrite has the option to create physical dump from some Windows Phone devices.
If not - JTAG or Chip-off.
Thomass30
Topic: Nokia Lumia whatsapp
Replies: 2
Views: 1185
 
Page 1 of 16
Page 1, 2, 3 ... 14, 15, 16  Next