I have downloaded data using an Infinity Best Dongle and created a .mtk dump file for a 2016 single SIM (RM945) Nokia 108 phone. The dump (data) file has been analysed using MSAB XRY software and there are no call logs and no deleted SMS data visible. I know calls were received by the phone and calls made from the phone during the time period of interest. I also believe SMS messages have been selectively deleted for the same time period of interest. The phone has been switched off and no calls or SMS messages have been made to or from the phone for the period following the time period of interest and so data hasn't been overwritten or displaced. The call file MPD_002 and the SMS file MPA3_001 are date and time stamped when the data was modified (deleted) but the deleted data is not being made visible. In addition to the use of the Infinity Best Dongle the phone has had data downloaded directly using the MSAB XRY software and the results are the same.
I am looking for advice on how to access and make the deleted data visible and confirmation that the deleted data will be retained on the phone, and where this will be stored on the phone.
Any thoughts or advice would be greatly appreciated.
I have downloaded data using an Infinity Best Dongle and created a .mtk dump file for a 2016 single SIM (RM945) Nokia 108 phone. The dump (data) file has been analysed using MSAB XRY software and there are no call logs and no deleted SMS data visible. I know calls were received by the phone and calls made from the phone during the time period of interest. I also believe SMS messages have been selectively deleted for the same time period of interest. The phone has been switched off and no calls or SMS messages have been made to or from the phone for the period following the time period of interest and so data hasn't been overwritten or displaced. The call file MPD_002 and the SMS file MPA3_001 are date and time stamped when the data was modified (deleted) but the deleted data is not being made visible. In addition to the use of the Infinity Best Dongle the phone has had data downloaded directly using the MSAB XRY software and the results are the same.
I am looking for advice on how to access and make the deleted data visible and confirmation that the deleted data will be retained on the phone, and where this will be stored on the phone.
Any thoughts or advice would be greatly appreciated.
You probably have done this but checking anyway; did you examine SIM card separately? And was there a memory card in the device to examine?Â
Hello,
Your advice is much appreciated.
There is no memory card installed in the phone and the phone has never had a memory card installed.
The SIM card has been removed and it wasn't installed at the time of the data download(s).
Is it likely the deleted data is held on the SIM card?
Do I just repeat the download with the SIM card installed?
Many thanks
@fastyam try using an separate forensic SIM card reader that recovers deleted text messages when reading the card. You have nothing to lose in trying this option.Â
