±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 0 Overall: 35997
New Yesterday: 0 Visitors: 154

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Cellebrite and iPhone 5s

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Page 1, 2, 3, 4  Next 
  

lasvegascop
Senior Member
 

Cellebrite and iPhone 5s

Post Posted: Mar 24, 15 19:32

Is anyone else having any issues acquiring an iPhone 5s after the last update?

This my 4th attempt to acquire this iPhone 5s (A1533) logically.

During the acquisition it seems to stop during the "Reading Phone Info" screen at around File 4783 (this time), Once it actually made it to a video file then hung.

The Progress bar scrolls across the screen but the Target Bar never displays any action.

The last acquisition I allowed it to run over night with no success. Stuck trying to read the Phone Info.

I have rebooted the Cellebrite UFED touch 3 times and tried two different USB media targets.

I used the Cellebrite cable as well as a known good second Apple cable.

The phone acquired successfully with Lantern and I successfully acquired an Android both logically and File System acquisition right before attempting the iPhone to the same target media.

Larry

PS. It's the UFED Touch with the latest updates  
 
  

paraben
Member
 

Re: Cellebrite and iPhone 5s

Post Posted: Mar 24, 15 21:36

Do you have the latest version of iTunes installed? If so, that's likely the problem. It causes problems with forensic tools accessing the device. Installing an older version has solved this issue for me with other tools.
_________________
Paraben Corporation 
 
  

lasvegascop
Senior Member
 

Re: Cellebrite and iPhone 5s

Post Posted: Mar 24, 15 22:02

- paraben
Do you have the latest version of iTunes installed? If so, that's likely the problem. It causes problems with forensic tools accessing the device. Installing an older version has solved this issue for me with other tools.


The acquisition is via the UFED Touch. iTunes not required.

Larry  
 
  

Deltron
Senior Member
 

Re: Cellebrite and iPhone 5s

Post Posted: Mar 24, 15 22:11

I always seem to have most problems when it comes to Iphone, most of them have to do with the physical condition of the phone. My last problem was the cable i was using seemed to always randomly connect and disconnected i noticed this by the phone having a charging icon then not having an icon. We used rubber bands to keep the cord in place and it worked.

Have you tried other cables?  
 
  

lasvegascop
Senior Member
 

Re: Cellebrite and iPhone 5s

Post Posted: Mar 24, 15 23:42

- Deltron
I always seem to have most problems when it comes to Iphone, most of them have to do with the physical condition of the phone. My last problem was the cable i was using seemed to always randomly connect and disconnected i noticed this by the phone having a charging icon then not having an icon. We used rubber bands to keep the cord in place and it worked.

Have you tried other cables?


yes, as stated above I used two known good cables.

I was able to get a file system acquisition off of it.

THe logical is the only issue.

After I sent the last post to the forum an update magically appeared in my email. I have updated the Cellebrite and I am trying the Logical again..

Although it doesn't look promising, the entire time it took me to type this it is stuck on "Reading Phone Info File: 4757"


Larry  
 
  

UnallocatedClusters
Senior Member
 

Re: Cellebrite and iPhone 5s

Post Posted: Mar 25, 15 03:33

I assume just buying a better tool is not an option, but:

* Katana Forensics' Lantern Tool works extremely well with iPhone 5S phones.

* Compelson's Mobiledit Forensic software will also extract logical data from iPhone 5S phones.

Other thoughts:

You could create a mobile backup of the device and then use a variety of tools to extract data from the mobile backup such as Magnet Forensic's IEF tool.

If you cannot create a mobile backup, then maybe there is another issue going on with the phone.

Regards,

Larry  
 
  

lasvegascop
Senior Member
 

Re: Cellebrite and iPhone 5s

Post Posted: Mar 25, 15 03:51

- UnallocatedClusters
I assume just buying a better tool is not an option, but:

* Katana Forensics' Lantern Tool works extremely well with iPhone 5S phones.

* Compelson's Mobiledit Forensic software will also extract logical data from iPhone 5S phones.

Other thoughts:

You could create a mobile backup of the device and then use a variety of tools to extract data from the mobile backup such as Magnet Forensic's IEF tool.

If you cannot create a mobile backup, then maybe there is another issue going on with the phone.

Regards,

Larry


I always try to use a minimum of two tools on each device.
I used Lantern and it worked.
THe Cellebrite would not get a logical image but it did get a file system image.

THe reason for two separate tools and acquisitions you ask?
Without slamming or praising any tool, one tool pulled 29 contacts vs 1028 on the other.
One tool pulled 485 call logs, the other 200.
one tool got 789 SMS/Text messages vs 191.

So, I can work with that.. I still have no idea why Cellebrite wouldn't pull a logical off the phone though.  
 

Page 1 of 4
Page 1, 2, 3, 4  Next