Nokia Lumia 530 (RM...
 
Notifications
Clear all

Nokia Lumia 530 (RM-1019)

10 Posts
8 Users
0 Likes
1,352 Views
(@gharti)
Posts: 8
Active Member
Topic starter
 

Does anyone have any experience with extracting phone call logs or sms from a Nokia Lumia 530 (RM-1019) ?
Cellebrite UFED supports only the file system extraction without any data from sms or phone calls.

Thanks

GH

 
Posted : 05/02/2016 11:49 am
OxygenForensics
(@oxygenforensics)
Posts: 143
Estimable Member
 

Gharti,

I can explain what Oxygen Forensic Detective can do with Windows Phone 8 device

- if you connect via USB cable you will extract only files from flash card. This is a known limitation for WP devices.

- if you connect via Bluetooth you will additionaly extract calls history and contacts.

- if you know Windows Live credentials you can extract contacts and SMS from cloud using our feature "Windows Phone backup from cloud". You can extract all the cloud data including OneDrive if you use our stand-alone utility - Oxygen Forensic Cloud Extractor.

- if you create a JTAG image from Windows Phone and import it to our software you will parse all the available data contacts, calls, messages, calendar, all the file system, applications (WhatsApp, Facebook, Here Maps, etc) and deleted records. This is the best solution for WP 8 devices at the moment.

 
Posted : 05/02/2016 1:17 pm
(@dcs1094)
Posts: 146
Estimable Member
 

Alternative acquisition option to JTAG - identify the eMMC pinouts and utilise ISP to dump the NAND flash. You can then locate the 'store.vol' (SMS) and 'phone' (Call Logs) ESE database files and pull out the comms data.

 
Posted : 05/02/2016 3:15 pm
(@mobileforensicswales)
Posts: 274
Reputable Member
 

The only way I could get a comprehensive dump out of one of these in the past was via chip off. A 3 /10 for difficulty I'd say. No glue, easy dissasembly

 
Posted : 05/02/2016 3:16 pm
(@gharti)
Posts: 8
Active Member
Topic starter
 

Thanks for the answers.

I think I will try to get a dump via eMMC or JTAG.
If anyone have a picture with the eMMC or JTAG pinout for the RM-1019 board it would be helpfull for me… -)

Regards

GH

 
Posted : 08/02/2016 10:21 pm
(@andysayers)
Posts: 13
Active Member
 

At the moment there is the Lumia 635 and 710 in the CODED Resources section of the forensicnavigation website.
I've just ordered some 530s so as soon as I've worked out the ISP points i'll add them to there.

Andy

 
Posted : 16/02/2016 8:10 pm
(@gharti)
Posts: 8
Active Member
Topic starter
 

Thanks Andy, that sounds good.

I've just ordered some 530s so as soon as I've worked out the ISP points i'll add them to there.

 
Posted : 16/02/2016 10:10 pm
(@polar)
Posts: 48
Eminent Member
 

Thanks for the answers.

I think I will try to get a dump via eMMC or JTAG.
If anyone have a picture with the eMMC or JTAG pinout for the RM-1019 board it would be helpfull for me… -)

Regards

GH

http//vietnamgsm.vn/attachments/lumia-530-hs9008-jpg.12228/

 
Posted : 18/02/2016 11:49 pm
ForensicMeteor
(@forensicmeteor)
Posts: 60
Trusted Member
 

I've got an upcoming case involving a Lumia 530. I am curious as to what type of data Cellebrite was able to obtain via File System Extraction. Was a jtagg/chipoff needed? If so, are any pin layouts or resources for decoding the chipoff dump available? Equipment needed?

Thanks so much, guys!

 
Posted : 10/05/2016 1:07 am
Bolo
 Bolo
(@bolo)
Posts: 97
Trusted Member
 

I know that this is old topic but maybe others will be available to get into from this…

This model is long time supported by ATF (Advance Turbo Flasher) but also other tools as Easy Z3x etc.. you don't need to perform chip off since you can make all by eMMC ISP points which user "polar" already post 😉

For this model there are also adapter PCB available without need to solder anything into PCB

 
Posted : 13/09/2016 12:45 am
Share: