Notifications
Clear all

Phone hex dumps

3 Posts
2 Users
0 Reactions
643 Views
(@schoon)
Active Member
Joined: 16 years ago
Posts: 7
Topic starter  

Can anyone give me a brief answer to the following general questions
1. Why would you need a to do a physical (as opposed to a logical) phone dump?
2. Is there any software that automates reading a dump, or is it a case of using a hex editor and knowledge/trial and error?

TIA!!!!


   
Quote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

Can anyone give me a brief answer to the following general questions
1. Why would you need a to do a physical (as opposed to a logical) phone dump?

Because the hex dump or file system may hold the wear level copy/deleted/unallocated copy of messages

2. Is there any software that automates reading a dump, or is it a case of using a hex editor and knowledge/trial and error?

Lots! Read the forum posts, this has been covered hundreds of times and is the function of the forum - aka sharing ideas about which tools are best for what phones…

If you know enough about a phone you could technically get deleted data back from a lot of handset dumps/file system dumps using a hex editior


   
ReplyQuote
(@schoon)
Active Member
Joined: 16 years ago
Posts: 7
Topic starter  

Thanks very much. Those answers seem obvious now!


   
ReplyQuote
Share: