?? After seizing an...
 
Notifications
Clear all

?? After seizing an Android 10, should keep charging battery ??

4 Posts
3 Users
0 Likes
1,496 Views
(@pls_help_me_thx)
Posts: 2
New Member
Topic starter
 

 😣 There may be weeks before digital forensic people come to examine the Android 10 phone with unknown passcode.  It was in use when seized, but later auto locked.

Pls Help:

(1) Should keep it in power on and keep charging it? since battery cannot last long enough for weeks.

(2) Would it be harder to unlock or retrieve data if let it power down and then switch on later?

 

 
Posted : 22/12/2021 7:31 am
(@pls_help_me_thx)
Posts: 2
New Member
Topic starter
 

anyone knows, plz 😰 

 
Posted : 23/12/2021 2:55 am
(@bobsan)
Posts: 7
Active Member
 

Um, I am no expert, but let's think about this logically: If you let the battery die the phone will power off and once you are ready to mess with it you will turn it on and it will be in BFU, or pretty much complete protection. We know that:

  • For new devices running Android 10 and higher, file-based encryption is required.
  • Devices running Android 9 and higher can use adoptable storage and file-based encryption.

If we further read into professional hacking companies they always say: 

After-First-Unlock (AFU) extraction (must keep device alive seizure!) 

So...I think it's pretty safe to conclude that you should make the effort to keep device alive. Some older devices might be more vulnerable to guessing the password but that's for the experts to say, not me. Good luck. 

 
Posted : 23/12/2021 5:31 pm
(@gfshusbandforever)
Posts: 6
Active Member
 

To extract data from a device running on Android 10 “Queen Cake”, what told do you have, Cellebrite, MOBILedit, what extraction tools do you have? Do you have the code?

 

 

run adb and type

 

adb backup -all -system -shared -apk -obb -keyvalue

 

 

then use a Java applet called Android backup extracted.

 
Posted : 24/12/2021 8:05 pm
Share: