±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36595
New Yesterday: 4 Visitors: 80

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

WhatsApp Data Extraction

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2  Next 
  

rohitdharan
Member
 

WhatsApp Data Extraction

Post Posted: Jun 21, 19 10:36

Hello Experts.
Hope you all are doing well.

My question is how to extract WhatsApp data with the help of UFED?  
 
  

OxygenForensics
Senior Member
 

Re: WhatsApp Data Extraction

Post Posted: Jun 27, 19 13:13

Since nobody has answered your question we would like to say some words about our WhatsApp methods.
Oxygen Forensic Detctive offers complete WhatsApp acquiistion from Apple and Android devices, extraction of WhatsApp backups from iCloud and Google Drive and several exclusive methods - access to the WhatsApp server, WhatsApp backup decryption via phone number and WhatsApp extraction via QR token from PC. If you are interested you can drop us an email to request a demo license.  
 
  

rohitdharan
Member
 

Re: WhatsApp Data Extraction

Post Posted: Jun 28, 19 09:46

- OxygenForensics
Since nobody has answered your question we would like to say some words about our WhatsApp methods.
Oxygen Forensic Detctive offers complete WhatsApp acquiistion from Apple and Android devices, extraction of WhatsApp backups from iCloud and Google Drive and several exclusive methods - access to the WhatsApp server, WhatsApp backup decryption via phone number and WhatsApp extraction via QR token from PC. If you are interested you can drop us an email to request a demo license.



Thank you so much !  
 
  

Styers
Newbie
 

Re: WhatsApp Data Extraction

Post Posted: Jun 28, 19 18:00

Cloud analyzer if they have the password saved, and if the have it set up to save cloud backups.

A lot of "ifs" in that method. But it has worked for me a few times.  
 
  

matrix4n6
Newbie
 

Re: WhatsApp Data Extraction

Post Posted: Jul 01, 19 12:48

To extract WhatsApp-Data in UFED you have to use the option "Android Backup APK Downgrade" (to be found under the "File System" category).
(I don't know if that option is available in all UFED license models.)  
 
  

cs1337
Senior Member
 

Re: WhatsApp Data Extraction

Post Posted: Jul 02, 19 18:02

I have been having alot of success with the APK downgrade method in cellebrite UFED 4 PC. Make sure to install the APK Downgrade pack from the portal and install it into UFED 4 PC. one thing to keep in mind it is recommended by Cellebrite support as a "last resort" after jTag or chip-off as it is altering the APP version on the phone in order to extract the data.  
 
  

obev0098
Newbie
 

Re: WhatsApp Data Extraction

Post Posted: Aug 06, 19 18:28

Was you able to recover deleted data on an IOS device using UFED? We have only had luck on Android devices which we no longer supply.  
 

Page 1 of 2
Page 1, 2  Next