Fitbit Forensic Ana...
 
Notifications
Clear all

Fitbit Forensic Analysis  

  RSS
UnallocatedClusters
(@unallocatedclusters)
Senior Member

Colleagues,

I first tried a search of FF as well as other sources but could find little information regarding the ability of Cellebrite to extract Fitbit related data from smartphones.

I am being asked to extract and analyze Fitbit data from a smartphone (no details on iOS or Android make and model yet). The phone owner claims to be injured and unable to exercise so my client wants to see Fitbit related evidence to confirm the phone owner's claims.

Questions

1. Will Fitbit data be extracted and available for analysis from iPhone forensic extractions using Cellebrite?

2. Will Fitbit data be extracted and available for analysis from Android forensic extractions using Cellebrite?

3. Do I need to extract Fitbit data directly from www.fitbit.com for forensic analysis?

4. Please recommend tools and methods for acquisition and analysis of Fitbit data.

Quote
Posted : 08/07/2019 7:06 pm
randomaccess
(@randomaccess)
Active Member

Whilst I don't have direct answers to your question I have seen presentations where people have examined fitbit data

Axiom (https://www.magnetforensics.com/news/new-magnet-forensics-artifact-exchange-open/) has supported fitbit data synced from devices for a few years. But whether that's changed on Android/iOS remains to be seen.

You may need to get a physical/full file system extraction to access the data, or as you suggested, obtaining it from the cloud (https://help.fitbit.com/articles/en_US/Help_article/1133)

ReplyQuote
Posted : 09/07/2019 1:39 am
OxygenForensics
(@oxygenforensics)
Active Member

For your information, Oxygen Forensic Detective allows complete FitBit data extraction both from Apple iOS (even non jailbroken) and Android devices (a physical dump is required). Moreover, you can acquire FitBit data from the cloud via login/password or token in the built-in Oxygen Forensic Cloud Extractor.

ReplyQuote
Posted : 09/07/2019 8:32 am
trewmte
(@trewmte)
Community Legend

Colleagues,

I first tried a search of FF as well as other sources but could find little information regarding the ability of Cellebrite to extract Fitbit related data from smartphones.

I am being asked to extract and analyze Fitbit data from a smartphone (no details on iOS or Android make and model yet). The phone owner claims to be injured and unable to exercise so my client wants to see Fitbit related evidence to confirm the phone owner's claims.

Questions

1. Will Fitbit data be extracted and available for analysis from iPhone forensic extractions using Cellebrite?

2. Will Fitbit data be extracted and available for analysis from Android forensic extractions using Cellebrite?

3. Do I need to extract Fitbit data directly from www.fitbit.com for forensic analysis?

4. Please recommend tools and methods for acquisition and analysis of Fitbit data.

Might help with your tech analysis
https://www.dropbox.com/s/aaj0gmrk5rz1r4l/Fitbit%20examination.png

Taken from "Watch what you wear preliminary forensic analysis of smart watches"
https://ieeexplore.ieee.org/document/7299930

Cellebrite has been involved previously with wearable data devices as shown in the above image.

Taken from Release Version 7.13 UFED Physical Analyzer, UFED Logical Analyzer & Cellebrite Reader Enhancements UFED 4PC/Touch2 January 2019 "Android New and updated apps - Fitbit 2.83"

In the chip-off community there are some looking at Fitbit using teardowns to understand what might be a source of embedded OS and data retention on certain devices https://fccid.io/XRAFB502/Internal-Photos/Int-Photos-2863174#download That said there are some Fitbits which do not have an embedded OS (e.g. Fitbit Alta HR) and applications cannot be installed on that Fitbit. Instead the fitness tracker is synchronized to a mobile device or 'the' server (which is noted by other posters to this thread).

Lastly, Fitbit did release a presentation (2016) that highlighted data retention. An image of that is here

https://i.postimg.cc/5tPP4nLN/Fitbit-data-retention.png

ReplyQuote
Posted : 09/07/2019 10:01 am
Share: