All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: Recovery from Blackberry Image/Dump
PostPosted: December 8th, 2017, 14:43 
Offline

Joined: May 26th, 2017, 12:52
Posts: 28
Location: Canada
Anyone have any experience with recovering data off a Blackberry image dump?

Dump came from a Blackberry Z10 specifically.


Top
 Profile  
 
 Post subject: Re: Recovery from Blackberry Image/Dump
PostPosted: December 9th, 2017, 8:27 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2520
Location: Ontario, Canada
I'm pretty sure it is encrypted. If not, just scan for raw data

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: Recovery from Blackberry Image/Dump
PostPosted: December 11th, 2017, 6:42 
Offline

Joined: November 9th, 2006, 15:15
Posts: 2983
Pretty sure the Cellebrite can handle this if you have access to it or know someone who could parse the dump for you.


Top
 Profile  
 
 Post subject: Re: Recovery from Blackberry Image/Dump
PostPosted: December 12th, 2017, 16:59 
Offline
User avatar

Joined: December 29th, 2016, 18:13
Posts: 141
Location: Poland
Not all Z10 are encrypted - if you will need we can perform Physical Analysis using latest UFED PA..just contact me

_________________
Best regards,
Boguslaw Rzepka,
Multi-COM Ltd., Poland


Top
 Profile  
 
 Post subject: Re: Recovery from Blackberry Image/Dump
PostPosted: December 15th, 2017, 16:27 
Offline

Joined: May 26th, 2017, 12:52
Posts: 28
Location: Canada
Bolo wrote:
Not all Z10 are encrypted - if you will need we can perform Physical Analysis using latest UFED PA..just contact me


I'm able to see pictures with a raw scan. So it looks like it's not entirely encrypted.

I'm looking for messages in particular. Is Cellebrite also capable of finding those?


Top
 Profile  
 
 Post subject: Re: Recovery from Blackberry Image/Dump
PostPosted: December 16th, 2017, 3:43 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2785
Location: Kuwait
Giroot wrote:
Bolo wrote:
Not all Z10 are encrypted - if you will need we can perform Physical Analysis using latest UFED PA..just contact me


I'm able to see pictures with a raw scan. So it looks like it's not entirely encrypted.

I'm looking for messages in particular. Is Cellebrite also capable of finding those?


You may ask Sasha also here: http://rusolut.com/
they tried hundreds or maybe more and they are well known on the field.

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: Recovery from Blackberry Image/Dump
PostPosted: December 16th, 2017, 15:27 
Offline
User avatar

Joined: December 29th, 2016, 18:13
Posts: 141
Location: Poland
@Giroot: from physical dump not - but writing a small parser in Python as a addon for PA can give results

_________________
Best regards,
Boguslaw Rzepka,
Multi-COM Ltd., Poland


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 22 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group