BlackBerry physical

In the pdf release notes it says;
"Blackberry Physical
Physical Dump of User Partition Memory"

So it isnt the complete memory, just the user partition (media, and files)

further to that, it also says;

"you can now recover deleted pictures and information from the user partition area of the handset memory on many Blackberry devices in this version. support is limited but getting back that essential deleted picture is now a possibility"

I am also extremely interested in this feature. I just emailed them regarding this specific announcement.

Thanks for that. Maybe MSAB can step in and answer the question and tell what the excact story is?

I have tested this and surprisingly all it does is create an image of the BB mass storage device (which is the Blackberry memory card).

Something you can do with FTK Imager.

I call this, aggressive marketing.

Hello All,

First of all thanks for your interest. You asked for a response from MSAB so here it is…

With BlackBerry Devices, our new physical extraction support in v6.2 works on the media card and also on the internal user partition if the BlackBerry device being examined allows access to it. This is not the case for all devices (in which case only the media card can be physically imaged), but on devices where this internal USER memory is available, we can now image that as well.

As we have stated clearly in the release notes, this support is limited, but it can help you recover both live and deleted files from both the memory card and, where possible, the user partition of BlackBerry devices.

Typically this can result in you getting back deleted images and media files. Which is both an improvement and a benefit to users compared to previous support levels offered.

We have tried to be responsible in our presentation of the facts and I think using the term "Support is limited" in our marketing material is both proportional and balanced in the circumstances.

I call this, aggressive marketing.

Thanks for your input MobileForensic, it is always nice to understand where people are coming from when they leave comments like that. I note with great interest that you have only ever posted 2 comments.

Our developers were even more interested to discover that you edited your first post to just say "error" one minute before posting your comment above. Prior to that it seems that your post from 2009 read “In case the phone you want to test is not supported by XACT (supports about 230 models), try using UFED Physical that has about 400 models supported.“

It's better for everyone to be open and honest for the good of customers…

@ XRY_Mike

Any body who have basics in forensics understand that adding support for physical imaging of memory card or any mass storage device have no relation to a claim of adding physical imaging support to Blackberry. Pointing fingers at somebody or questioning their intentions doesn't discards the merit of the question.

Understood and thanks for your comments.

As previously pointed out - Blackberry support is limited to the memory card and the user partition area of the device's internal memory. So as already identified by "cyrus" it is not a complete memory dump

We are not attempting to claim anything else, other than to highlight to our customers that we have improved support for Blackberry's in v6.2 and that users now have the potential to get back more data using XRY Physical.

It is an aggressive marketing anyway you spin it or try to deflect discussion onto other irrelevant topics (don't bother checking, I have NO previous posts). It does not change the fact that the term used is industry known to be one thing while actually delivering something which is far lesser.