Hi,
I have a non-encrypted iTunes backup from an IPhone 7 128GB running IOS10. The phone only has 12GB of data on it.
I am looking to extract any WhatsApp and Facebook Messenger text based messages and chat logs etc including any that have been deleted.
Just wondering what the chances of Oxygen Forensic Analyst are of being able to access deleted messages from the device? I've not purchased the software yet so just wanting to know likelihood of getting deleted messages back first.
I'm not sure how the IOS file system works but with it only having 12GB of data on the device with total storage of 128GB i'm thinking that 'deleted' messages are not likely to be overwritten?
Also would these messages be stored on the device or are they loaded on connection to Facebook?
I also have access to the actual phone if there is a better way of getting to the data than from the iTunes backup.
Thanks for reading my query.
Andy
Hi,
Just wondering what the chances of Oxygen Forensic Analyst are of being able to access deleted messages from the device? I've not purchased the software yet so just wanting to know likelihood of getting deleted messages back first.
Oxygen Forensic Detective/Analyst is one of the best mobile forensic tools and can recover deleted records from SQLite databases.
Is there any other software that will also do this ?
Hi Andy
You will need to get access to the SQLite databases to recover the deleted messages.
Our software can help you interrogate the databases and recover any deleted messages.
https://
There is a huge amount of information on our website in our blogs
https://
Cheers
Paul
Hi AndyKent,
you can contact our support team on our website for a demo license to see how it works on your iTunes backup. You will be able to extract current and deleted data from WhatsApp. Unfortunately Facebook usually does not put much data into iTunes backup.