Extracting video fr...
 
Notifications
Clear all

Extracting video from cell phone  

  RSS
DigitalAgent
(@digitalagent)
New Member

Hey guys,

A question was raised within my digital forensic unit and I just wanted to hear additional input
If you have a cell phone with multiple videos stored on the device and you only wanted to pull only one of them, I know Cellebrite will need to extract them all in order to retrieve that one video you need. Is there a forensic program that will let you only extract that one video?

This would save time and privacy of our client, just two quick general reasons we were thinking of. Any input would be great, thank you.

Quote
Posted : 07/03/2014 12:58 am
MobilePhoneForensic
(@mobilephoneforensic)
Member

I have not come across any tool that will allow you to extract a specific videos.

What is the make and the model of the phone in question?

Do you know if the video is stored on the handset or memory card.

If the video is on the handset and you are able to switch the phone on in offline mode without a SIM card inserted then I would connect the handset to a computer via either a tableau or a software USB write blocker and access the menu of the phone through the computer and copy the requested video out.

Make sure all the steps you take are documented and you are good to go.

Hope this makes sense and helps?

Regards

ReplyQuote
Posted : 07/03/2014 2:35 am
nlpd120
(@nlpd120)
Member

Another option with the computer is to use a Linux Boot Disc like Paladin or Raptor. Be sure to test on a similar phone or phones first to make sure it works.

Regards,

Chris Currier

ReplyQuote
Posted : 07/03/2014 8:43 am
nlpd120
(@nlpd120)
Member

I forgot to mention the Santoku Linux boot disc as well from via forensics.

Chris

ReplyQuote
Posted : 07/03/2014 8:45 am
nlpd120
(@nlpd120)
Member

I forgot to mention the Santoku Linux boot disc as well from via forensics.

Chris

ReplyQuote
Posted : 07/03/2014 8:46 am
jhup
 jhup
(@jhup)
Community Legend

Can you provide a bit more details to this?

Unless you are "extracting" logical file, in this case a video file, how would you distinguish one block of data from an other without looking at it?

This is sort of like an inverse Schrödinger's cat…

To be able to tell what it is, you must look, at least at the file system level - but by looking you are using up time and intruding on the privacy.

Hey guys,

A question was raised within my digital forensic unit and I just wanted to hear additional input
If you have a cell phone with multiple videos stored on the device and you only wanted to pull only one of them, I know Cellebrite will need to extract them all in order to retrieve that one video you need. Is there a forensic program that will let you only extract that one video?

This would save time and privacy of our client, just two quick general reasons we were thinking of. Any input would be great, thank you.

ReplyQuote
Posted : 07/03/2014 7:30 pm
Share: