±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 34854
New Yesterday: 2 Visitors: 130

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

Coolpad 3632A with Secure Boot

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Coolpad 3632A with Secure Boot

Post Posted: Wed Nov 14, 2018 12:04 pm

We have the above phone in our office now and running it through Cellebrite (Physical) it stops at the point where we have to enter the pin to boot the phone. We don't know the pin, so is there any other way to get a extraction off this phone? The only cell phone software we have is: Cellebrite and Magnet IEF; all up to date. Is this where EDL comes in handy? We haven't use that at all but Cellebrite doesn't ask us to use it on this device. Just tip 100 and Cable A.

Thanks  

jvaldez225
Newbie
 
 
  

Re: Coolpad 3632A with Secure Boot

Post Posted: Thu Nov 15, 2018 10:49 am

If I'm asking the question incorrectly please advise. I've only been doing cell phone forensics for about 18 months and we just kinda got thrown into this. We work for a State Department of Corrections and this a phone found in one of our facilities. I'm not sure if that helps in maybe getting a response or not. I have a bunch of questions to ask you guys later on and pick your brains about this stuff and compare what we have and what is out there available we'll leave that out there for another time. If there's another solution to get past the boot pin please let me know. Thank you!  

jvaldez225
Newbie
 
 
  

Re: Coolpad 3632A with Secure Boot

Post Posted: Thu Nov 15, 2018 6:38 pm

If Cellebrite has already successfully made a logical and file system extraction, then you could try rooting the phone to enable a physical image.

What version of Android OS is the phone running?
_________________
__̴ı̴̴̡̡̡ ̡͌l̡̡̡ ̡͌l̡*̡̡ ̴̡ı̴̴̡ ̡̡͡|̲̲̲͡͡͡ ̲▫̲͡ ̲̲̲͡͡π̲̲͡͡ ̲̲͡▫̲̲͡͡ ̲|̡̡̡ ̡ ̴̡ı̴̡̡ ̡͌l̡̡̡̡.__ 

UnallocatedClusters
Senior Member
 
 
  

Re: Coolpad 3632A with Secure Boot

Post Posted: Fri Nov 16, 2018 5:54 am

Hey jvaldez225,
The proper term for the situation you’re describing where a pin code or pattern is required to boot the device is “Secure Startup”. (Secure Boot refers to a different setting and they do not correlate)
It means that the encryption key is bound to the user passcode, and therefore some sort of brute force technique must be enabled and implemented overcoming various device protections. This is not straightforward and can be a daunting task.
At this moment in time, I am unaware of any verified solution to modern Secure Startup except Cellebrite’s Advanced Services (CAS), available to Law Enforcement.
And even we don’t support all phones and every model. Unfortunately, we don’t yet support the 3632A in this mode.
We’re working on expanding this and hope to get to this model sooner than later.

Best,
Shahar
Cellebrite  

shahartal
Member
 
 
  

Re: Coolpad 3632A with Secure Boot

Post Posted: Fri Nov 16, 2018 9:38 am

Yes Secure Startup is what I meant. Thank you so much for your response. I'll write up what I have and send it up to the boss. Thanks again everyone!  

jvaldez225
Newbie
 
 

Page 1 of 1