Hi All,
How would you get around a handset security code for a forensic examination without using the manual reset option? Is there a forensically sound way to do this or are these handsets not able to be examined?
Many Thanks
What handset is it, have you tried using a firmware extracting tool/hex dumper
Normally if you connect up to a phone via its JTAG you dont need security codes
Thanks for the reply,
It was a general enquiry as to what tools / software etc would I need to look into. I get the picture that there isn't a on size fits all piece of software to extract data from mobile phones and XRY seems ok for getting the data out of unlocked phones.
But if the handset is locked and XRY is unable to connect to it then what would my next course of action be?
There is alternative
Depending on which make/model there are some handsets that allow for a code to be entered on the keypad that bypasses the handset password that gains access to the phone's memory.
With respect to hex dumping or using codes on keypads, there has been no reported substantive proof that they are forensically sound methods - this is why much of the work for the mobile telephone examination side is conducted under ACPO guidelines principle 2. With SIM/USIM, however, they have less concerns when forensically acquiring data.
I have used the unlocking boxes to read the the handset and display the unlock code which has enabled me to then examine the phones but I have a Sony Ericsson that wont display the code when using the read function so it’s still locked and cannot be examined.
Can I use the unlock function to do it or would this possibly affect more data than just the handset code.
How far is it acceptable to go to ge to the user data on the phone for examination?