I have a Samsung Galaxy S4 and was able to get a physical extraction of the device with UFED4 PC. I am trying to find the area in physical analyzer that stores the device password/pin number so that we can access the phone. Any help would be greatly appreciated.
Thanks!!
Try checking under Device Info on Extraction Summary page. The lock pattern is displayed there, so I am guessing the pin would be there as well.
If the PIN isn't displayed on the Extraction Summary page, it means that PA couldn't parse and decrypt that information for you.
The locksettings.db* files don't contain your PIN in plain text mode, so more processing would be needed to extract your PIN from there. Sometimes this process is hopeless…
If I would have a physical dump and access to the device as well, I would check what could be exploited on the device to remove the user lock instead of finding it )