Notifications
Clear all

android forensic

7 Posts
7 Users
0 Likes
467 Views
 deez
(@deez)
Posts: 5
Active Member
Topic starter
 

Anyone has ever done a forensic inv. on a t-mobile mytouch ANDROID? because its not supported yet by UFED cellebrite nor .XRY … can someone knw a tool to get a video out of this phone? thnk you.

 
Posted : 15/10/2010 11:27 pm
(@dficsi)
Posts: 283
Reputable Member
 

If its a video you're after it will, more than likely, be on the memory card and not on the phone itself.
If you are law enforcement and you do Android investigations I'd advise getting in touch with Via Forensics as they specialise in Android forensics and have created a framework for investigations. If you're not law enforcement you might have to figure it out for yourself. If that's the case you're first stop will need to be somewhere like forums.xda-developers.com.

 
Posted : 16/10/2010 1:11 am
(@oxygen_software)
Posts: 53
Trusted Member
 

Anyone has ever done a forensic inv. on a t-mobile mytouch ANDROID? because its not supported yet by UFED cellebrite nor .XRY … can someone knw a tool to get a video out of this phone? thnk you.

Oxygen Forensic Suite should work with this device. You can test it with free trial version available at our site.
Here is the "how-to" document http//www.oxygen-forensic.com/download/articles/Oxygen_Forensic_Suite-How_to_connect_Android_devices.pdf

 
Posted : 18/10/2010 8:17 pm
 RonS
(@rons)
Posts: 358
Reputable Member
 

deez,

UFED does support the following 2 models under T-Mobile vendor
myTouch 3G (Android) - since 2009
myTouch 3G Slide (Android) - since the latest version

 
Posted : 19/10/2010 9:21 pm
Logan
(@logan)
Posts: 66
Trusted Member
 

You will find that many Android phones operate in the same way and can therefore be extracted under different profiles using XRY.

I would try a different profile on XRY with another handset that supports Android, maybe one that has you know will have the same version. Try the HTC Hero profile?

 
Posted : 28/10/2010 1:09 pm
(@douglasbrush)
Posts: 812
Prominent Member
 

Has anyone had much success with synced Gmail and Docs being extracted?

 
Posted : 14/12/2010 4:02 am
(@alexc)
Posts: 301
Reputable Member
 

As I recall, in the case of Gmail at least, there's a content provider (on the versions I've looked at anyhow) so it's feasible for an agent to get some data back (my notes say that you need your agent to have the permission com.google.android.providers.gmail.permission.READ_GMAIL set.)

Don't have anything in my notes on Googledocs, I might have a look at that.

But of course, if you have root then you can get whatever you want if it's there!

 
Posted : 14/12/2010 5:28 pm
Share: