±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 36449
New Yesterday: 6 Visitors: 208

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Windows Mobile software

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2, 3 
  

Marius1512
Newbie
 

Re: Windows Mobile software

Post Posted: Nov 27, 15 12:47

Flash the Phone with the ATF and you have the full dump. With this you can work in your favourite tool.  
 
  

Krispii
Member
 

Re: Windows Mobile software

Post Posted: Jul 21, 17 14:05

Good Morning All,

I also have some bf2 files from an eMMC download of a Nokia Lumia.

I would be grateful for any guidance with regard to decoding these as none of the tools we have in our arsenal actually do anything with them.  
 
  

trewmte
Senior Member
 

Re: Windows Mobile software

Post Posted: Jul 22, 17 12:58

- Krispii
Good Morning All,

I also have some bf2 files from an eMMC download of a Nokia Lumia.

I would be grateful for any guidance with regard to decoding these as none of the tools we have in our arsenal actually do anything with them.


So you have a physical dump (ISP?) instead of a logical read? What are the size of the files?

Have you looked at Oxygen Forensic Analyst?
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 
 
  

Mickael45
Newbie
 

Re: Windows Mobile software

Post Posted: Aug 14, 17 03:59

- Krispii
Good Morning All,

I also have some bf2 files from an eMMC download of a Nokia Lumia.

I would be grateful for any guidance with regard to decoding these as none of the tools we have in our arsenal actually do anything with them.



hello,

UFED PA and AXIOM can extract data from the dump lumia 520

best regards,  
 
  

Krispii
Member
 

Re: Windows Mobile software

Post Posted: Aug 14, 17 17:36

Thanks - neither Axiom or UFED dealt with the .bf2 files.

Oxygen made the best effort but still only found the text components with no time/date stamp or sent/received context.

I've sent some sample conversation files to Cellebrite and will be sending the same to Oxygen.
I've obfuscated the email addresses but not sent those with image transfers as the files contain base64 thumbnail images (illegal files in my case)  
 

Page 3 of 3
Page Previous  1, 2, 3