Notifications
Clear all
General (Technical, Procedural, Software, Hardware etc.)
4
Posts
3
Users
0
Reactions
1,028
Views
Topic starter
31/08/2019 8:20 am
2 questions…..
From a jailbroken phone can you.
1. see when significant locations was switched off or on
2. see any old data before it was switched off
04/09/2019 11:05 am
I'm not tested this but I think
1. no
2. yes
Cellebrite provide a CAS (Cellebrite Advanced Services) to extract this data by full filesystem extraction.
Topic starter
29/09/2019 8:17 am
Where in the file system are significant locations stored?
30/09/2019 9:54 am
Since the device is jailbroken already, you should make a full dump of the filesystem and analyze it with UFED Physical Analyzer for example. The extracted data will be under the Location entry, containing the source of the extraction for each item as well.
Doing this manually is almost impossible.