±Your Account
Membership:
New Today: 1
New Yesterday: 12
Overall: 24194
Visitors: 65±Latest Webinar
±Latest Articles
· Geo-tagging & Photo Tracking On iOS
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
· KS – an open source bash script for indexing data
· Mobile Device Geotags & Armed Forces
· Categorization of embedded system forensic collection methodologies
· Interpretation of NTFS Timestamps
· What are ‘gdocs’? Google Drive Data – part 2
· What are ‘gdocs’? Google Drive Data
· Bad Sector Recovery
· Forensic Artifact: Malware Analysis in Windows 8
· Windows 8: Important Considerations for Computer Forensics and Electronic Discovery
±Follow Us
±Latest Jobs
Back to top
Skip to content
Skip to menu
Back to top
Back to main
Skip to menu
Deleted BBM problems via Cellebrite
Deleted BBM problems via Cellebrite
Posted: Thu Dec 06, 2012 5:39 am
I'm encountering problems whilst using a read in Cellebrite Physical Analyser where the deleted BBM messages are not differentiating between the from/to in the chats. All of the deleted messages have defaulted to the PIN number of the device that we have read being the sending PIN however we know that some of these are received messages.
Anyone else encountered this problem?
Anyone else encountered this problem?
-
DazM - Newbie
Re: Deleted BBM problems via Cellebrite
Posted: Thu Dec 06, 2012 12:03 pm
Now that you mention this, I have seen quite a few extractions showing quite a few 'one party' chats, but they haven't really been of interest yet so I haven't looked into it. So yes I think I'm seeing this as well, although not 100% if they are just one side of the conversation, or actually both sides being presented as coming from only one PIN.
-

topsirloin - Member
Re: Deleted BBM problems via Cellebrite
Posted: Wed Dec 12, 2012 4:22 am
Is this running physical analyzer 3.6.0.31?
-

triran - Senior Member
















