±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 2 Overall: 35126
New Yesterday: 6 Visitors: 163

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Deleted BBM problems via Cellebrite

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts

Deleted BBM problems via Cellebrite

Post Posted: Thu Dec 06, 2012 9:39 am

I'm encountering problems whilst using a read in Cellebrite Physical Analyser where the deleted BBM messages are not differentiating between the from/to in the chats. All of the deleted messages have defaulted to the PIN number of the device that we have read being the sending PIN however we know that some of these are received messages.

Anyone else encountered this problem?  


Re: Deleted BBM problems via Cellebrite

Post Posted: Thu Dec 06, 2012 4:03 pm

Now that you mention this, I have seen quite a few extractions showing quite a few 'one party' chats, but they haven't really been of interest yet so I haven't looked into it. So yes I think I'm seeing this as well, although not 100% if they are just one side of the conversation, or actually both sides being presented as coming from only one PIN.  


Re: Deleted BBM problems via Cellebrite

Post Posted: Wed Dec 12, 2012 8:22 am

Is this running physical analyzer  

Senior Member

Page 1 of 1