±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 4
New Yesterday: 6
Overall: 27389
Visitors: 48

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Deleted BBM problems via Cellebrite

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Deleted BBM problems via Cellebrite

Post Posted: Thu Dec 06, 2012 5:39 am

I'm encountering problems whilst using a read in Cellebrite Physical Analyser where the deleted BBM messages are not differentiating between the from/to in the chats. All of the deleted messages have defaulted to the PIN number of the device that we have read being the sending PIN however we know that some of these are received messages.

Anyone else encountered this problem?  

DazM
Newbie
 
 
  

Re: Deleted BBM problems via Cellebrite

Post Posted: Thu Dec 06, 2012 12:03 pm

Now that you mention this, I have seen quite a few extractions showing quite a few 'one party' chats, but they haven't really been of interest yet so I haven't looked into it. So yes I think I'm seeing this as well, although not 100% if they are just one side of the conversation, or actually both sides being presented as coming from only one PIN.  

topsirloin
Member
 
 
  

Re: Deleted BBM problems via Cellebrite

Post Posted: Wed Dec 12, 2012 4:22 am

Is this running physical analyzer 3.6.0.31?  

triran
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 1