±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 36783
New Yesterday: 2 Visitors: 141

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Oxygen Forensics & iOS7 Emails

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page Previous  1, 2 
  

toppock123
Member
 

Re: Oxygen Forensics & iOS7 Emails

Post Posted: Nov 07, 13 21:08

Thanks again for the replies.

So it seems then that Jailbreaking is the only option. I have done this to my own devices many times but never in a forensic environment. A few issues/questions I have:

1. What are the implications of Jailbreaking on an exhibit? (I.E. If it was to go to court, how would I explain the process and can I explain that the process is forensically sound?)

2. Is there actually a jailbreak available for this handset? Various wizards and sites say there isn't, essentially meaning I wont be able to get the emails off at all.

Edit: The phone is a 4 not a 4S - iOS 7.0.2 - Baseband: 04.12.09

Cheers  
 
  

Jonathan
Senior Member
 

Re: Oxygen Forensics & iOS7 Emails

Post Posted: Nov 07, 13 22:11

Two points re jailbreaking; one, you invalidate the warranty, two, you may brick the phone - especially unforgivable if this happens before you've had a chance to extract any data from it.

Now that you say the phone is a 4 not a 4S, that makes a huge difference. Best to check the facts first - because everyone who has replied to you has wasted their time.
_________________
Forensic Control
twitter.com/ForensicControl
St Bride Foundation, 14 Bride Lane, London, EC4Y 8EQ 
 
  

toppock123
Member
 

Re: Oxygen Forensics & iOS7 Emails

Post Posted: Nov 07, 13 22:34

Apologies for the incorrect information.

What difference does this make then?  
 
  

MadRhetoric
Newbie
 

Re: Oxygen Forensics & iOS7 Emails

Post Posted: Nov 08, 13 00:45

The difference in model and OS can change (but not necessarily):
1) Your options for a forensic acquisition (and whether certain data can be decrypted)
2) Your options for a non-forensic acquisition (and whether certain data can be decrypted)
3) What jailbreak methods will work if that's needed
4) The file or file locations for certain data

Accurately and definitively identifying the model and OS are absolutely the first priority.  
 
  

toppock123
Member
 

Re: Oxygen Forensics & iOS7 Emails

Post Posted: Nov 08, 13 01:41

As stated, apologies.

I am aware of the implications of the change in model, but I mean for this case.

I already tried dumping a 4 with oxygen, version 7.0.3 but to no avail.  
 
  

ludlowboy
Senior Member
 

Re: Oxygen Forensics & iOS7 Emails

Post Posted: Nov 08, 13 03:54

Most software will extract E mails from an iPhone 4. However your problem is the IOS7 software. There have been 3 releases of IOS7, I believe, and not all are supported by mobile phone software yet.
_________________
There is nothing either good or bad, but thinking makes it so. 
 

Page 2 of 2
Page Previous  1, 2