±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 2 Overall: 33980
New Yesterday: 5 Visitors: 103

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Blackberry 9720 physical extraction

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Blackberry 9720 physical extraction

Post Posted: Tue Mar 06, 2018 3:41 pm

Hello everyone,

I work with a Blackberry 9720 with OS 7.1.0.211. The phone doesn’t have a password protection and the encryption is set to off. I want to get a physical image of the phone because the user deleted some data of it. I tried with latest version of UFED Cellebrite but unfortunately it doesn’t support physical extraction. Is it a possible way to do that with other way or other forensic tool?

Thanks for attention!  

thanosxid
Newbie
 
 
  

Re: Blackberry 9720 physical extraction

Post Posted: Tue Mar 06, 2018 4:28 pm

Chip off will obtain you a physical dump of the handset.  

dandaman_24
Senior Member
 
 
  

Re: Blackberry 9720 physical extraction

Post Posted: Thu Mar 08, 2018 2:05 pm

- dandaman_24
Chip off will obtain you a physical dump of the handset.

is this solution work with blackberry protected with 4 digt's PIN ?? if i do the chip-off can i read the data or they encrypted ?  

qassam22222
Senior Member
 
 
  

Re: Blackberry 9720 physical extraction

Post Posted: Thu Mar 08, 2018 4:37 pm

- qassam22222
is this solution work with blackberry protected with 4 digt's PIN ?? if i do the chip-off can i read the data or they encrypted ?

Yes with a 4 digit PIN, If the data is encrypted, the data is encrypted, you need to decrypt it to read it.

Your original post mentioned the device had no security and no encryption.  

dandaman_24
Senior Member
 
 
  

Re: Blackberry 9720 physical extraction

Post Posted: Fri Mar 09, 2018 2:23 am

If you know the user blackberry ID and the password, you can decrypt the physical dump.
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 

Igor_Michailov
Senior Member
 
 
  

Re: Blackberry 9720 physical extraction

Post Posted: Thu Apr 05, 2018 1:07 am

Hi Igor,

I have a physical dump from a encrypted 9720 obtained via chip-off and I also have the blackberry ID and password. How do I go about decrypting the physical dump?

Thanks,
Brian.  

brian89
Newbie
 
 
  

Re: Blackberry 9720 physical extraction

Post Posted: Thu Apr 05, 2018 10:16 pm

see PM
_________________
Computer, Cell Phone & Chip-Off Forensics

linkedin.com/in/igormikhaylovcf 

Igor_Michailov
Senior Member
 
 

Page 1 of 1