Magnet Forensics published an interesting article on Windows Phone device forensics, showing how authorities view device information recovery and extraction.
It seems that Windows Phone 8.1 is more difficult at extracting information than other devices, Magnet writes:
"The analytics problem facing Windows Phone is mainly acquisition. Unlike other devices, such as iOS and Android, JTAG and chip cracking are the main modes for obtaining information for most Windows Phone devices. This means that traditional survey tools such as Cellebrite, XRY, MPE+, etc., cannot get data from Windows Phone.
Prosecutors must manually connect to a standard test access port (TAP) to transfer data from the original physical storage or manually solder the chip to read the evidence data directly from the phone. ”
Magnet Forensic's software can recover text messages, call logs, and contacts, as well as some third-party app data, but interestingly, it can't read your emails. We are curious about how the software of Magnet Forensic's software reacts in the face of fully encrypted devices. （via: WMPU） |
Posted on 11/23/2014 1:27:22 PM
|
|
|
|
Posted on 11/23/2014 1:36:49 PM
