Yesterday I examined a Samsung SPH-M820 Galaxy Prevail with a numeric password lock
I was able to boot the phone into safe mode and access the data on the phone. The USB debugging was unchecked. I was able to acquire the data from the phone using Secure View. I was unable to acquire any data from the phone using CelleBrite or Device Seizure
I hope this helps someone else
Was your retrieval Logical, Physical, or Both? We haven't run into any troubles with our UFED extracting Android Physical dumps since the Android support update. If you were able to bypass the lock and get the phone into safe mode you should have been able to get full support with Cellebrite - cable 100. I'll look into the details on that Model. Thanks.
What procedure did you use to put the phone into "SAFE" mode?
Not sure if this applies to the OP, but I found this for the DROID devices
1. Power off your device.
2. Slide open the keyboard and power on by holding power and “menu” at the same time.
(Use the menu key on the physical keyboard.)
3. Continue holding the menu key until you get to the Droid eye.
4. The phone should now vibrate if done correctly.
5. Release menu and your phone should boot with “Safe Mode” showing in the bottom left corner.
I will be trying it tomorrow on the Droid 2 and Atrix.
http//
Beasleyjt - I'm looking at a Droid 2 with physical keyboard. There is no MENU button though.
Beasleyjt - I'm looking at a Droid 2 with physical keyboard. There is no MENU button though.
Droid 2 Procedure
1. Power it down.
2. Press and hold the OK button on the slide out keyboard.
3. Power on the device and keep OK held.
4. If done correctly "Safe Mode" should be displayed in the bottom left corner once the phone boots.
Just a quick update on the JTAG process for locked Android devices
http//copgeek018.wordpress.com/
Very nice!