Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
4
Posts
3
Users
0
Likes
651
Views
Topic starter
2 questions…..
From a jailbroken phone can you.
1. see when significant locations was switched off or on
2. see any old data before it was switched off
Posted : 31/08/2019 7:20 am
I'm not tested this but I think
1. no
2. yes
Cellebrite provide a CAS (Cellebrite Advanced Services) to extract this data by full filesystem extraction.
Posted : 04/09/2019 10:05 am
Topic starter
Where in the file system are significant locations stored?
Posted : 29/09/2019 7:17 am
Since the device is jailbroken already, you should make a full dump of the filesystem and analyze it with UFED Physical Analyzer for example. The extracted data will be under the Location entry, containing the source of the extraction for each item as well.
Doing this manually is almost impossible.
Posted : 30/09/2019 8:54 am