Hi all, as an encase user I cannot get a physical image of a 9720. There is an allegation that numerous texts and emails have been deleted before we seized the unit. Can anyone in London provide me with an image of this phone? I can do the analysis once bought into encase but just need the triage done. Happy to pay of course. regards Darren
Hi Darren,
Sent you a quick PM - if this is still a live issue, perhaps we can help.
Regards,
Ross @afentis
p.s I'm not sure you're using the right tool for the job here - a BB physical dump interpreted by EnCase would not be my first choice
Isn't pysical image of Blackberry 9720 encrypted?
In UFED you can only do logical and File system extraction of BB 9720 only, no physical.
Unless you do a physical dump of a similar bb profile.