Cellebrite Extraction Report

Education and Training

Last Post by 4n6Matt 2 months ago

2 Posts

2 Users

0 Reactions

1,033 Views

RSS

CCCrook

(@cccrook)

Active Member

Joined: 5 years ago

Posts: 4

Topic starter 13/12/2024 9:16 pm

I completed an advanced logical extraction (Cellebrite) on a phone and when viewing the report (in both PDF and UFDR format) there is data in Instant Messages that is quite confusing.

There is a phone number listed in the FROM column but the TO column is blank (for an incoming SMS) the next row shows the FROM blank and the TO has a phone number (for outgoing SMS). It is like that for 62 messages.

Can anyone give me some guidance or educate me as to why this is? I haven't seen this before.

Quote

4n6Matt

(@4n6matt)

Active Member

Joined: 10 years ago

Posts: 8

17/02/2025 3:37 pm

It may be worth checking what the message type is such as "app message" is it a draft etc....
Then its probably worth a nose in the DB to check if the data you are expecting is actually there.

ReplyQuote