We have a Cellebrite UFED Touch Pro and attempting to do a physical extraction of an unlocked Ipod Touch 2G with IOS 4.2.1 - the extraction always gets hung at 76% and after numerous attempts, I get the same problem at 76%. We are using the latest version of UFED Physical Analyzer with the latest IOS pack installed. I contacted Cellebrite and they advised I will not be able to do a physical extraction since there must be corruption in the data on the Ipod. They also advised there is no way to analyze the 76% I was able to get to. Logical extraction worked fine but information indicates that our target cleared their Internet history before we obtained the device so a logical extraction doesn't provide us with much information. The Ipod Touch 2G appears to function without issue.
This is a missing persons case where it is believed the deleted Internet history might provide relevant and useful information in regards to the case. Anyone else have any other ideas about ways we might be able to complete a complete extraction to recover the deleted Internet history for examination? Thanks for any help you might be able to provide. Our firm will consider the purchase of additional tools if necessary.
Chris
Did you try performing the extraction on a different USB port (not USB 3.0).
If this does not work, please try on a different computer.
Ron
Did you try performing the extraction on a different USB port (not USB 3.0).
If this does not work, please try on a different computer.Ron
Thanks for the reply -
Yes we did - multiple ports on multiple machines after multiple acquisitions and none are USB 3.0.
Chris