Does anyone know if there is anything to be done with a locked HP iPAQ running Windows Mobile v5 (aside from chipoff)? I can't find anything on Mobile Forensic Central.
Thanks guys.
do you have access to a cellebrite UFED? you might be able to do a physical dump of the phone memory then use the UFED software to parse the physical dump for information such as test messages, pics, etc..
I never worked with a cellebrite devices, but from what i researched on their site, this method seems possible if you cant access the phone via the operating system, perhaps the others can shed more light on situations like this.
do you have access to a cellebrite UFED? you might be able to do a physical dump of the phone memory then use the UFED software to parse the physical dump for information such as test messages, pics, etc..
I never worked with a cellebrite devices, but from what i researched on their site, this method seems possible if you cant access the phone via the operating system, perhaps the others can shed more light on situations like this.
Taurean25 is giving you sound advice. I have used UFEDs physical analyzer to do a physical dump of pin locked devices and recovered more usable data from the physical dumps than i would have from a simple logical pull. Whenever possible try and grab a physical dump of your device instead of just a logical pull. One additional note, the Physical Analyzer will also decrypt iOS 5 dumps that other tools like XRY can not.