±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 0
New Yesterday: 17
Overall: 27344
Visitors: 35

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Nokia Lumia 800 [WP7]

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Nokia Lumia 800 [WP7]

Post Posted: Tue Feb 05, 2013 4:03 am

Hi,

I'm back again! After my escapades with the BMW key fob I've managed to get a Nokia Lumia 800 land on my lap.

I thought it would have been a straightforward download, but XRY and CelleBrite will only at a push extract some images.

Oxygen wont even connect to it.

I have followed all the XRY/CelleBrite instructions for connecting to the Zune software, but to no avail.

A colleague suggested '91 Panda PC Suite' but its not connecting to that. It's almost as bad as a Chinese clone trying to get anything off this thing.

I know Windows Phones are not that popular, but has anybody had any success in extracting data [Logical or Physical] off one of these devices.


Thanks.  

4Rensics
Senior Member
 
 
  

Re: Nokia Lumia 800 [WP7]

Post Posted: Tue Feb 05, 2013 8:35 am

Unfortunately the windows phone OS is pretty locked down in actual data recovery methods. Data can be recovered from the first lot of windows phones but recovery from the later models is much more difficult. A few of the nokia Lumia 710 and 800 handsets shipped with a qualcomm bootloader and not the nokia DLOAD so if youre lucky you will be able to image the partitions using Linux and then write something to pull the data you need from it.

I'd use this as your guide:
forum.xda-developers.c...?t=1587650

Other than that its not looking to good in the future, about the only access they have allowed in Windows phone 8 is access to the contacts with an agent so it will be a full manual for some time yet.  

agolding
Member
 
 
  

Re: Nokia Lumia 800 [WP7]

Post Posted: Tue Feb 05, 2013 8:41 am

Thanks.

That is kinda what is it looking like. I have done mostly a manual download as there is not much on there and its not a hi priority exhibit, but it did get to that stage where I just wanted to see if at all anything could be extracted. Unfortunately all I got was some photo's via XRY or Physical Analyser 3. Like you say, it doesn't see anything else.

I will look out for the bootloader next time.

I did see these in my Google expedition :

www.fonefunshop.co.uk/...er%29.html

But I dunno if its just for flashing or if it lets you extract the data in some kind of raw format.


Oh and I did check EnCase 7.05 but like everything else and as you mentioned, it supports only upto Windows 6.x  

4Rensics
Senior Member
 
 
  

Re: Nokia Lumia 800 [WP7]

Post Posted: Tue Feb 05, 2013 3:13 pm

Have you tried using a test handset to see if it is possible to download the internal copy of Nokia Suite stored in the handset to a PC and then using a write-blocker connect the PC to the target device to see if it is possible to download logical stored data on the target device?
_________________
Institute for Digital Forensics (IDF) - LinkedIn
Mobile Telephone Examination Board (MTEB) - LinkedIn
Mobile Telephone Evidence & Forensics trewmte.blogspot.com
ForensicMobex now MTEB Linkedin Subgroup 

trewmte
Senior Member
 
 
  

Re: Nokia Lumia 800 [WP7]

Post Posted: Wed Feb 06, 2013 4:35 am

- trewmte
Have you tried using a test handset to see if it is possible to download the internal copy of Nokia Suite stored in the handset to a PC and then using a write-blocker connect the PC to the target device to see if it is possible to download logical stored data on the target device?


I'm pretty sure the Nokia Suite only applys to the non windows phone range. I have used navifirm to flash a lumia before but it doesnt support backup of contacts, calls sms etc like s40 and symbian handsets. It will prompt you to install zune if you plug the handset in.

Regarding the JTAG jigs, would be a useful look, It may well be encrypted but it doesnt appear to be if you get hold of the unsecure bootloader. Not much look when we get the wp8 handsets coming through as bitlocker is setup by default unfortunately.  

agolding
Member
 
 
  

Re: Nokia Lumia 800 [WP7]

Post Posted: Wed Feb 06, 2013 4:07 pm

- agolding
It will prompt you to install zune if you plug the handset in.


Yes, you're right agolding. I hadn't detected that about Lumia as I haven't actually seen one yet. I don't even know anyone who has got one.

I did check with Nokia Developers and it does speak of synchronisation with Microsoft Zune - www.developer.nokia.co...Lumia_800/ select Tab 'Other' and see synchronisation / Microsoft Zune.

At Nokia's consumer user guide website - www.nokia.com/gb-en/su...userguide/ - I see under 'Set up sync with computer' it doesn't actually state the user has to upgrade or upload Zune to the handset. It does require Zune to be downloaded and installed on a PC:

" 'Set up sync with computer'
Keep your stuff with you – with the Zune PC app, you can sync your music, videos, and photos between your phone and your compatible computer. You can also back up and update your phone with the latest software, to improve performance and get new features.

1. Download and install the latest version of Zune on your PC from www.zune.net/.
If you're using an Apple Mac, download Windows Phone 7 Connector for Mac from the Mac App Store.

2. Make sure your phone is not locked with a security code.

3. Connect your phone to your computer with a compatible USB cable, and follow the instructions shown on your computer.

4. To change Zune sync settings, on your computer, select SETTINGS.

If you have previously used another app, such as Nokia Ovi Suite or Nokia Suite, to sync your files between your phone and computer, you can set Zune to sync files to the same folders you have used earlier, and have your music and other content easily synced to your new phone."

So there maybe a chance to acquire certain data.

I also note that the Nokia Lumia 800 User Guide ( nds1.nokia.com/phones/..._UG_en.pdf ) states:

"Back up, sync, and restore your phone
Your phone is automatically backed up during the software update, when you update the phone using the primary computer (the computer you first connected your phone to with the USB cable). If you use a different computer to update your phone software, no backup is created. You can change your primary computer in the Zune settings.
The backup includes the following:
• System settings
• Account settings
• Pictures
• Music
• Videos
• Documents
Your downloaded apps may not be included in the backup, but you can re-download them from the Marketplace, free of charge. Data transmission costs may apply. For more info, contact your network service provider. To back up your content, you can also sync your phone to your computer with Zune or Windows Phone 7 Connector for Mac without updating your phone software. Syncing does not back up your system settings or your apps. You can also set your phone to sync your contacts through Microsoft Outlook, so you can restore them to your phone from your computer. Restore a backup to your phone Use a USB cable to connect your phone to your primary computer, then use Zune to restore your backed up content and the earlier version of your phone software."
_________________
Institute for Digital Forensics (IDF) - LinkedIn
Mobile Telephone Examination Board (MTEB) - LinkedIn
Mobile Telephone Evidence & Forensics trewmte.blogspot.com
ForensicMobex now MTEB Linkedin Subgroup 

trewmte
Senior Member
 
 
  

Re: Nokia Lumia 800 [WP7]

Post Posted: Thu Feb 07, 2013 7:37 am

Yeah Zune allows for backups to be made but unfortunately they're encrypted. Zune does allow you to get Media from wp7 devices in the same way as XRY gets them normally.  

agolding
Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next