Cellebrite UFED 4 P...
 
Notifications
Clear all

Cellebrite UFED 4 PC - Physical Extractions Micro SD or USB

12 Posts
7 Users
0 Likes
2,885 Views
(@jpeters)
Posts: 4
New Member
Topic starter
 

I am a relatively new mobile phone examiner and I am running into the same issue repeatedly with multiple different phones. I'm not sure if this is an error on my part or if the different cell phones do not support the extraction method.

However, I have not had a successful physical extraction when it calls for a micro sd card or usb device via the OTG cable. I have had it get to the point where it tells me to unplug the device from the UFED reader and press continue on the phone, which indicates to me the extraction method is compatible but if using a micro sd card it tells me the card is in the wrong format despite multiple attempts with different formats. Also when trying to transfer to USB it almost seems as if the usb device is not being recognized or getting any power.

*Edit* I have updated to the most current version of the UFED 4 PC software.

Any help would be greatly appreciated!

Detective Peters
Electronic Crime Unit
Saint Joseph Police Department
jpeters@stjoemo.org

 
Posted : 03/11/2017 7:38 pm
Mreza
(@mreza)
Posts: 84
Trusted Member
 

If I understand well, you are trying physical extraction through Advanced ADB method?

Have you checked the security patch on your mobile phones? Security patch needs to be until november 2016. Your storage devices has to be FAT32, exFAT or vFAT.

 
Posted : 03/11/2017 9:13 pm
(@jpeters)
Posts: 4
New Member
Topic starter
 

That is correct, advanced ADB. The device security patches I am encountering are more recent than the November 2016. Does this mean I am just unable to perform a physical extraction on those devices?

I have used FAT32, exFAT, and vFAT formats on the micro sd card as well as different sized micro sd cards and different brands.

 
Posted : 03/11/2017 9:29 pm
Mreza
(@mreza)
Posts: 84
Trusted Member
 

Does this mean I am just unable to perform a physical extraction on those devices?

I think that you need to find another way.

 
Posted : 04/11/2017 10:41 am
(@jpeters)
Posts: 4
New Member
Topic starter
 

Do you have any suggestions or ideas as to what another way would be?

 
Posted : 04/11/2017 12:38 pm
Mreza
(@mreza)
Posts: 84
Trusted Member
 

Do you have any suggestions or ideas as to what another way would be?

I can't recommend you an universal solution because there is none. It depends from device to device.

You would need to give me more informations, for example which models are you talking about, which version of Android do they have, which security patch, are they locked, rooted, etc.?

 
Posted : 04/11/2017 1:24 pm
(@jpeters)
Posts: 4
New Member
Topic starter
 

I will provide some additional information when I return to the office Monday morning. I do appreciate your help.

 
Posted : 04/11/2017 1:35 pm
(@deltron)
Posts: 125
Estimable Member
 

I have had a bunch of micro sd card on had all sizes, formats, and brands.
When i come across this issue I keep trying different cards until it works.
This is just me, I always seem to just need to keep trying different cards and randomly it works some time and I note down what card and format.

 
Posted : 06/11/2017 3:39 am
(@nicocorne)
Posts: 1
New Member
 

Hi,

You can't use the advanced ADB profile when the security patch are more recent than nov 2016.

This profile uses a security breach fixed after this date.

So try another profile but if the phone is recent, à physical extraction may not be possible without root rights.

Regards

 
Posted : 06/11/2017 10:34 am
(@ltmorales)
Posts: 4
New Member
 

Have you tried using a USB instead of SD card? I've never had issues doing this extraction when connecting a Fat32 USB using the OTG cable.

 
Posted : 06/11/2017 1:10 pm
Page 1 / 2
Share: