Hello everyone,
I work with a Blackberry 9720 with OS 7.1.0.211. The phone doesn’t have a password protection and the encryption is set to off. I want to get a physical image of the phone because the user deleted some data of it. I tried with latest version of UFED Cellebrite but unfortunately it doesn’t support physical extraction. Is it a possible way to do that with other way or other forensic tool?
Thanks for attention!
Chip off will obtain you a physical dump of the handset.
Chip off will obtain you a physical dump of the handset.
is this solution work with blackberry protected with 4 digt's PIN ?? if i do the chip-off can i read the data or they encrypted ?
is this solution work with blackberry protected with 4 digt's PIN ?? if i do the chip-off can i read the data or they encrypted ?
Yes with a 4 digit PIN, If the data is encrypted, the data is encrypted, you need to decrypt it to read it.
Your original post mentioned the device had no security and no encryption.
If you know the user blackberry ID and the password, you can decrypt the physical dump.
Hi Igor,
I have a physical dump from a encrypted 9720 obtained via chip-off and I also have the blackberry ID and password. How do I go about decrypting the physical dump?
Thanks,
Brian.
see PM