Is it possible to get an image from the encrypted Samsung Galaxy S9-SM-G965F mobile phone? The password is unknown. Thanks.
I have been working on the same thing on a Galaxy S9+. Mine does not have a password, but I have only been able to get texts, call logs, pics and SD card data. I am having a lot of trouble getting any app data off (even though I can see there are Facebook messages). I did a manual ADB backup without any luck. Will be interested to hear if there are any other solutions!
Factory reset the phone. Gain root access(very few roots currently available for S9 currently) run credible recovery software. ie magnet aquire, paraben android recovery stick. Or shell out 4000$ and get MSAB or cellbrite
Factory reset the phone.
Good luck recovering data after factory reset on encrypted phone…
You should get in touch with passcodeunlock - a FF member - specialized in your issue.
See here
https://www.forensicfocus.com/Your_Account/profile=passcodeunlock/
Any further help required?
If help is needed, please not that I'm on vacation until the end of the month, with limited internet and phone access.
@TinyBrain nobody contacted me regarding the S9 devices, so probably those aren't important cases.
Happy holiday -))
Hello,
Data after factory reset can be recovered using NAND protocol - we performed many of such task which fully positive results and recovered many data even when reading over ISP, SD protocol (ChipOff) brings no results at all but we tried this right now on NOT encrypted phones. Yours phones are encrypted out of box……
P.S
Performing factory reset on phone which is encrypted complicate a lot this but it's NOT impossible as @Passcode writes. While normal approach of encrypted device will be decrypting those similar need to be done after recovery over NAND but……. there is one trick . This can be done ONLY if we will get full logicial structure so perfectly reconstructed NAND image recovery which is not always possible - in case we will get partial RAW it will be very hard or almost impossible to apply decryption key on fragmented data to decrypt those correctly.
I would like to thank the members who helped me with this. The information you provide is very important to me. This information contributed a lot to our work.