Smartwatch Forensics

alex1010 · 2017-01-17T18:30:18Z

I am a Digital Forensics student who is currently conducting research into budget Smartwatch Forensics, to determine what, if any, information if any can be retrieved from them. I have opted to research the growing market of cheap Chinese replicas which hold around a 5% market share in the West, although very little information is available on these devices. The watch I am investigating is a DZ09 Smartwatch running Nucleus OS and has MTK chip, MT6261A and is around £10 from ebay. It is surprisingly full of features considering the price such as camera, media player, etc. The watch is compatible with Android and iOS, uses bluetooth to connect to the phone, has SIM Card and external storage compatibility and can be connected via a micro USB cable. The watch can pretty much act as its own device whereas before it would've just mirrored the phone. The scenario is a Android smartphone (Nexus 5) will be connected to a budget smartwatch which has a SIM card and micro SD card and the phone connects to the watch through an app. Both will have separate evidence planted on each and paired information through bluetooth. Some evidence will be deleted from the phone and while it is not synced to see if a footprint is left. If successful I aim to try different scenarios such as full disk encryption on the phone and seeing if the watch acts as potential back door to retrieving evidence. So far I have managed to run XRY against the watch under its predecessor the U8 smartwatch which gathers some information from it. I have also used SP Flash tool to perform a RAM test and back up the firmware from the device. The watch is very temperamental with Windows and Linux OS, which keep auto disconnecting it as it is not a recognised device. The watch appears on Linux under terminal commands however, cant be accessed or mounted. The main question I have is if anyone has any experience with smartwatches or Chinese replicas running unfamiliar OS's and how best to tackle them? And additionally any tools or techniques which are be able to gather data from the device? I have researched various Russian forums and attempted to find source code through Baidu but it is very covered up. I am also planning on assessing the data stored in the app on the phone for evidence and through adb on the phone when connected to the watch. But mainly I am looking for guidance to help me conduct this investigation.

Page 2 / 2 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by dega 6 years ago

14 Posts

5 Users

1 Reactions

5,386 Views

RSS

King1

(@king1)

Active Member

Joined: 6 years ago

Posts: 5

19/03/2021 3:42 pm

Hi there,

l am research on digital forensic opportunities from a Drone that has been recovered from a Prison Exercise Yard. Any ideas or any research done already on this topic. Thank you

ReplyQuote

King1

(@king1)

Active Member

Joined: 6 years ago

Posts: 5

19/03/2021 3:43 pm

Hi there,

l am research on digital forensic opportunities from a Drone that has been recovered from a Prison Exercise Yard. Any ideas or any research done already on this topic. Thank you

ReplyQuote

dega

(@dega)

Reputable Member

Joined: 12 years ago

Posts: 267

19/03/2021 6:39 pm

Posted by: @king1

Hi there,

l am research on digital forensic opportunities from a Drone that has been recovered from a Prison Exercise Yard. Any ideas or any research done already on this topic. Thank you

I am not sure, but autopsy maybe can analyze a drone

ReplyQuote

dega

(@dega)

Reputable Member

Joined: 12 years ago

Posts: 267

19/03/2021 6:41 pm

yes autopsy can analyze the sd of a drone

ReplyQuote

Page 2 / 2 Prev