±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 3 Overall: 35259
New Yesterday: 9 Visitors: 157

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Webinars

HELP! : How to image a Windows Surface RT (ARM)

Basic listing free. Premium listing includes listing on Forensic Focus homepage and RSS newsfeed, notification sent to Forensic Focus Twitter followers, a post to the Forensic Focus Facebook page, a post to the Forensic Focus LinkedIn Group and guaranteed inclusion of a link in the Forensic Focus newsletter. Learn more.
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

4Rensics
Senior Member
 

HELP! : How to image a Windows Surface RT (ARM)

Post Posted: Mar 08, 19 04:36

Morning.

I'm currently battling with a Windows Surface RT running on the old ARM chipset. (The Surface is from 2013)

There is no boot to BIOS/UFEI. So I've had to boot to Windows (8.1 I think) but I can't run FTK Imager lite or command line because they are not signed by Microsoft and the exe's wont run.
I found a dd.exe to try, but same as above again.

Does anybody know or any tools that I can use to get an image of this 32GB eMMC. (Chip off is not an option...yet!)

Any help much appreciated.

4F  
 
  

mahoney
Newbie
 

Re: HELP! : How to image a Windows Surface RT (ARM)

Post Posted: Mar 08, 19 05:58

Volume+ and power key should get you to the UEFI. If this doesn't work on your ARM tablet you may still be able to boot from USB.

Secure Boot only allows 'trusted' OSs, of which Ubuntu is one of them. You'll need to edit the boot config files from your Kali/Backtrack bootable USB to resemble the trusted Ubuntu ones. Fingers crossed, the Surface you have is set to try to boot from USB first.

Also try Volume- and power key to get to the boot menu.  
 
  

4Rensics
Senior Member
 

Re: HELP! : How to image a Windows Surface RT (ARM)

Post Posted: Mar 08, 19 08:56

Thank you. Maybe it wasn't working because I was trying with a Paladin USB. I'll try with my Kali USB and see if that works. I did try booting with the Vol up and Vol down to no affect.


Thanks.  
 
  

hectic_forensics
Member
 

Re: HELP! : How to image a Windows Surface RT (ARM)

Post Posted: Mar 11, 19 03:27

Try connecting the Paladin USB with a powered USB hub. That has worked for me in the past - obviously with any Secure Boot etc disabled.  
 

Page 1 of 1