I am having trouble is trying to image the memory in my i900 mobile phone.
.XRY wont read it because it is too new. Encase and FTKi cant pick up the mounted drive on my machine.
Any advice?
Thank you.
Have you tried to see if the internal disk is recognised by FTK or EnCase after setting up a Guest partnership using Microsoft ActiveSync? I previously have acquired an image of the i300 using this method.
When you say 'mounted drive' what exactly do you mean?
I managed to get the phone reading in Linux but it did not mount the drive like a typical drive, it was able to view file structure but it was not able to access any of the folders, error saying folder does not exist.
I managed to get the phone mounted as a drive but i was unable to do it the way you suggested. I had to install and app onto the phone, i am still unable to find a way on how to do it without installing applications onto the phone it self.
I have come across encryption on the pictures and other files on the system. Wondering if anyone has encouted this problems before? I file is a .MENC extension. Which is encryption for windows phones i believe?
Thank you.
.MENC is used with Windows Mobile Encryption http//
The decryption key is stored on the device's internal flash memory.
Has anyone had any experience with .menc files?
http//
There's, currently, no way to decrypt them unless you have the key. You can make a backup of the key using Sprite Backup http//
It is easy to bypass the .menc encrypted files. Simply use active sync and sync the files onto your computer. You should be able to view them there.