±Partners and Sponsors

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 5
New Yesterday: 12
Overall: 26994
Visitors: 58

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Blackberry Q10

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Blackberry Q10

Post Posted: Sun Jan 12, 2014 3:08 pm

I have a Blackberry Q-10 that I am trying to extract the live SMS from for a court proceeding. I have read the prior topics on the Blackberry Z-10 (and the references for the Q-10), and noticed that most of them concern breaking encryption.

My cellebrite will pull the contacts but nothing more. Neither will Device Seizure. I have also tried the free program of Blackberry Backup Extractor but they cant read this format.

Anyone have any idea other than the old world mode (photographing the screen) as to how to extract the SMS from a Q-10?  

Ehdevlin
Member
 
 
  

Re: Blackberry Q10

Post Posted: Tue Jan 14, 2014 12:07 pm

- Ehdevlin
I have a Blackberry Q-10 that I am trying to extract the live SMS from for a court proceeding. I have read the prior topics on the Blackberry Z-10 (and the references for the Q-10), and noticed that most of them concern breaking encryption.

My cellebrite will pull the contacts but nothing more. Neither will Device Seizure. I have also tried the free program of Blackberry Backup Extractor but they cant read this format.

Anyone have any idea other than the old world mode (photographing the screen) as to how to extract the SMS from a Q-10?


I believe that the issues surrounding the Z10 topic, also apply for the Q10 model.

I have not done many of these, however the last one we had required a full manual examination due to the encryption. Cellebrite, XRY and so on will only extract contacts as you have found out.

Sorry to be the bearer of bad news, but looks like your going to have to do a manual exam!  

DCS1094
Senior Member
 
 
  

Re: Blackberry Q10

Post Posted: Tue Jan 14, 2014 4:45 pm

I would try reaching out on the Crackberry Forums where all the blackberry Gurus reside.  

csalm1337
Member
 
 
  

Re: Blackberry Q10

Post Posted: Tue Jan 14, 2014 7:58 pm

The Blackberry 10 Series don't use the BlackBerry Desktop software for doing back ups. Those back ups are commonly viewed by a variety of mobile device forensic tools and even other non forensic tools. Instead they use BlackBerry Link instead. us.blackberry.com/soft...-link.html

So far in doing searches it appears the utility available is just as limited with these BBX Back up files. May be a matter for Chip Off Forensics with these devices - if that is a possibility due to encryption.

I have not played around with BlackBerry 10s because here in the US they appear to be being returned to sellers (that I have spoken with) in favor of other devices.

Keep us posted if you find something that works well.

Regards,

Chris Currier  

nlpd120
Senior Member
 
 
  

Re: Blackberry Q10

Post Posted: Thu Jan 16, 2014 11:30 am

I ended up working around it in a way that I personally hate, but was left with little other options. I attempted to process it with the Cellebrite UFED Touch, Paraben's Device Seizure 6.5, Sustein's Secureview, and Oxygen, and received no results.

I ended up speaking with both parties and the court, and presented the last resort option, where I placed a Blackberry App on the device called SMS Backup. The application created an XML and a Excel Work Book of the entire contents of the SMS and MMS on the device. It was nice because the device only displayed about 40 SMS message, but it exported more than 1200, and located the ones that each party was wanting. As a further evaluation of the integrity of the extraction, I compared the SMS times with call detail records and were able to receive sufficient match that everyone accepted the authenticity.

It was not the way I would prefer to do it, but in the civil case it was the best option I felt that I had and everyone was satisfied.  

Ehdevlin
Member
 
 
  

Re: Blackberry Q10

Post Posted: Fri Jan 17, 2014 1:58 pm

Thanks for the update. Sometimes we have to find a utility that works. Otherwise we get very little or nothing.

Chris  

nlpd120
Senior Member
 
 
  

Re: Blackberry Q10

Post Posted: Fri Jan 17, 2014 4:05 pm

Cellebrite UFED Touch and UFED 4PC will support logical extraction from BB 10 devices in its next release that will include SMS messages.

Ron  

Last edited by RonS on Fri Jan 17, 2014 6:14 pm; edited 1 time in total

RonS
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next