±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35503
New Yesterday: 0 Visitors: 128

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Touch 2, File System extraction repeating

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Carver
Newbie
 

Touch 2, File System extraction repeating

Post Posted: Jun 11, 18 15:29

Has anyone else had any issue with the File System data extractions on the Cellebrite UFED Touch 2? I've now had a few devices, (current device LG Stylus 2 Plus), where the extraction goes just over 19MB, then restarts the phone and restarts the extraction. After 50 restarts, I had to end the insanity. My partner has run across the same issue.

I'm wondering if the data collected is just repeated data, or if it is new data, extracted each time, eventually coming to a complete FS extraction.

thoughts?

target device is a USB drive  
 
  

passcodeunlock
Senior Member
 

Re: Touch 2, File System extraction repeating

Post Posted: Jun 11, 18 20:53

It is just a point of failure of the UFED Touch 2, trying to read or write something to the device, which fails and then triggers a reboot.

Reboot looks like a safety implementation for not altering the device data in any way in case of failures, which is very logical way to gain trust!

If you are able to provide some logs, feel free to contact RonS or other tech people from Cellebrite. Their support is also good on known issues Smile On unknown issues... well, be patient!
_________________
Apple passcode unlock + decrypted filesystem dump, Android user locks unlock + physical dump with decrypted userdata partition. We provide our services world-wide, but we reserve the right for choosing which tasks we take and which we deny! 
 

Page 1 of 1