Iphone at hello scr...
 
Notifications
Clear all

Iphone at hello screen

5 Posts
4 Users
0 Reactions
1,024 Views
(@deltron)
Estimable Member
Joined: 11 years ago
Posts: 125
Topic starter  

Phone was reset and now sits at the hello screen, any way to image the phone?
cellebrite just sits at 0% when trying UFED software.


   
Quote
CopyRight
(@copyright)
Estimable Member
Joined: 13 years ago
Posts: 184
 

Why would you want to image an iPhone that sits on the hello screen, you know that data will be at its minimum due to the secure wipe the phone has gone through right?

Anyway, the phone needs to trust the device before establishing a transfer chanel between itself and the UFED device. You will need to actiate the phone and click on "trust" when it prompts you to trust the device.

Goodluck!


   
ReplyQuote
(@deltron)
Estimable Member
Joined: 11 years ago
Posts: 125
Topic starter  

Why would you want to image an iPhone that sits on the hello screen, you know that data will be at its minimum due to the secure wipe the phone has gone through right?

Anyway, the phone needs to trust the device before establishing a transfer chanel between itself and the UFED device. You will need to actiate the phone and click on "trust" when it prompts you to trust the device.

Goodluck!

Just confirming,
I will have to put it at the home screen and then image,
Then looking at the databases i should be able to judge when the iphone was wiped
https://www.blackbagtech.com/blog/2013/07/31/iphone-forensics-wiped-iphone-are-you-sure/


   
ReplyQuote
SamBrown
(@sambrown)
Trusted Member
Joined: 10 years ago
Posts: 97
 

Hi, that article is quite old. You'd need a physical dump of that device, so it would have to be an iPhone 4 or older…


   
ReplyQuote
Bulldawg
(@bulldawg)
Estimable Member
Joined: 13 years ago
Posts: 190
 

You will need to set up the phone enough to get to the home screen. Once that's done, the only useful information you'll get off of it is when it was wiped.

sms.db and a few other database files–can't remember off hand–get created when the phone is rebooted after a wipe, so the file creation times can be used to determine when the device was wiped.


   
ReplyQuote
Share: