±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36115
New Yesterday: 0 Visitors: 110

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Fitbit Forensic Analysis

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

UnallocatedClusters
Senior Member
 

Fitbit Forensic Analysis

Post Posted: Jul 08, 19 18:06

Colleagues,

I first tried a search of FF as well as other sources but could find little information regarding the ability of Cellebrite to extract Fitbit related data from smartphones.

I am being asked to extract and analyze Fitbit data from a smartphone (no details on iOS or Android make and model yet). The phone owner claims to be injured and unable to exercise so my client wants to see Fitbit related evidence to confirm the phone owner's claims.

Questions:

1. Will Fitbit data be extracted and available for analysis from iPhone forensic extractions using Cellebrite?


2. Will Fitbit data be extracted and available for analysis from Android forensic extractions using Cellebrite?


3. Do I need to extract Fitbit data directly from www.fitbit.com for forensic analysis?


4. Please recommend tools and methods for acquisition and analysis of Fitbit data.  
 
  

randomaccess
Senior Member
 

Re: Fitbit Forensic Analysis

Post Posted: Jul 09, 19 00:39

Whilst I don't have direct answers to your question I have seen presentations where people have examined fitbit data

Axiom (https://www.magnetforensics.com/news/new-magnet-forensics-artifact-exchange-open/) has supported fitbit data synced from devices for a few years. But whether that's changed on Android/iOS remains to be seen.

You may need to get a physical/full file system extraction to access the data, or as you suggested, obtaining it from the cloud (https://help.fitbit.com/articles/en_US/Help_article/1133)  
 
  

OxygenForensics
Senior Member
 

Re: Fitbit Forensic Analysis

Post Posted: Jul 09, 19 07:32

For your information, Oxygen Forensic Detective allows complete FitBit data extraction both from Apple iOS (even non jailbroken) and Android devices (a physical dump is required). Moreover, you can acquire FitBit data from the cloud via login/password or token in the built-in Oxygen Forensic Cloud Extractor.  
 
  

trewmte
Senior Member
 

Re: Fitbit Forensic Analysis

Post Posted: Jul 09, 19 09:01

- UnallocatedClusters
Colleagues,

I first tried a search of FF as well as other sources but could find little information regarding the ability of Cellebrite to extract Fitbit related data from smartphones.

I am being asked to extract and analyze Fitbit data from a smartphone (no details on iOS or Android make and model yet). The phone owner claims to be injured and unable to exercise so my client wants to see Fitbit related evidence to confirm the phone owner's claims.

Questions:

1. Will Fitbit data be extracted and available for analysis from iPhone forensic extractions using Cellebrite?


2. Will Fitbit data be extracted and available for analysis from Android forensic extractions using Cellebrite?


3. Do I need to extract Fitbit data directly from www.fitbit.com for forensic analysis?


4. Please recommend tools and methods for acquisition and analysis of Fitbit data.


Might help with your tech analysis
www.dropbox.com/s/aaj0...nation.png

Taken from "Watch what you wear: preliminary forensic analysis of smart watches"
ieeexplore.ieee.org/do...nt/7299930


Cellebrite has been involved previously with wearable data devices as shown in the above image.

Taken from Release Version 7.13: UFED Physical Analyzer, UFED Logical Analyzer & Cellebrite Reader Enhancements: UFED 4PC/Touch2 January 2019 "Android: New and updated apps - Fitbit 2.83"

In the chip-off community there are some looking at Fitbit using teardowns to understand what might be a source of embedded OS and data retention on certain devices fccid.io/XRAFB502/Inte...4#download That said there are some Fitbits which do not have an embedded OS (e.g. Fitbit Alta HR) and applications cannot be installed on that Fitbit. Instead the fitness tracker is synchronized to a mobile device or 'the' server (which is noted by other posters to this thread).

Lastly, Fitbit did release a presentation (2016) that highlighted data retention. An image of that is here:

i.postimg.cc/5tPP4nLN/...ention.png
_________________
Institute for Digital Forensics (IDF) - www.linkedin.com/groups/2436720
Mobile Telephone Examination Board (MTEB) - www.linkedin.com/groups/141739
Universal Network Investigations - www.linkedin.com/groups/13536130
Mobile Telephone Evidence & Forensics trewmte.blogspot.com 
 

Page 1 of 1