Switch to full style
CompactFlash, SD, MMC, USB flash storage. Anything that does not have moving parts inside.
Post a reply

Recovery from Blackberry Image/Dump

December 8th, 2017, 14:43

Anyone have any experience with recovering data off a Blackberry image dump?

Dump came from a Blackberry Z10 specifically.

Re: Recovery from Blackberry Image/Dump

December 9th, 2017, 8:27

I'm pretty sure it is encrypted. If not, just scan for raw data

Re: Recovery from Blackberry Image/Dump

December 11th, 2017, 6:42

Pretty sure the Cellebrite can handle this if you have access to it or know someone who could parse the dump for you.

Re: Recovery from Blackberry Image/Dump

December 12th, 2017, 16:59

Not all Z10 are encrypted - if you will need we can perform Physical Analysis using latest UFED PA..just contact me

Re: Recovery from Blackberry Image/Dump

December 15th, 2017, 16:27

Bolo wrote:Not all Z10 are encrypted - if you will need we can perform Physical Analysis using latest UFED PA..just contact me


I'm able to see pictures with a raw scan. So it looks like it's not entirely encrypted.

I'm looking for messages in particular. Is Cellebrite also capable of finding those?

Re: Recovery from Blackberry Image/Dump

December 16th, 2017, 3:43

Giroot wrote:
Bolo wrote:Not all Z10 are encrypted - if you will need we can perform Physical Analysis using latest UFED PA..just contact me


I'm able to see pictures with a raw scan. So it looks like it's not entirely encrypted.

I'm looking for messages in particular. Is Cellebrite also capable of finding those?


You may ask Sasha also here: http://rusolut.com/
they tried hundreds or maybe more and they are well known on the field.

Re: Recovery from Blackberry Image/Dump

December 16th, 2017, 15:27

@Giroot: from physical dump not - but writing a small parser in Python as a addon for PA can give results
Post a reply