Data Extraction from Phones

Phone forensic and investigation tools provide powerful decoding and analysis facilities for the extracted device data, and simplify the task of navigating through the device ís data structures. These data extraction tools assist in the complex tasks of intelligence gathering, investigative research, and providing legal evidence in the form of reports.

JTAG processMost phone recovery applications are designed to utilize the memory extracted and present the device ís hex extraction, file system and analyzed data in a clear and concise way, allowing investigators to use powerful search tools to reveal relevant information. As a completing step, most phone recovery service applications enable you to generate reports of your findings in various file formats, such as HTML, PDF, Excel (*.xlsx), and XML.

JTAG Data Extraction

JTAG (Joint Test Action Group) is an advanced method of data extraction that requires a forensic examiner to connect to the test access ports of the device to obtain a full physical image. This enables the examiner to unlock and gain accessto the raw data stored on the memory chip.† JTAG is non-destructive and offers the opportunity to access data from devices that have been altered or damaged in some way, where data ports are unavailable (or disconnected), or it is otherwise impossible to unlock the device using other forensic tools. Phone recovery companies are usually able to automate the JTAG extraction process once the physical connection to the device has been made.
Once you have the physical memory that was acquired with this method, it can be loaded into a software application for decoding. This will compile and prepare all the data, as if it was a regular extraction done without the intervention of phone recovery software.

Phone recovery experts like are able to go further than just JTAG extraction and provide the appropriate meta-data associated with the data that can be so crucial in many cases. This data (along with it’s associated meta-data) displays groups of analyzed data that are related to device specific features such as contacts, SMS messages, call logs, and so on. The available information and what is displayed depends on the device features and application version. For example, SMS messages are sorted according to the folders used by the messaging feature of the device, such as Drafts, Inbox, Outbox, Sent, and so on. Email messages are sorted according to the account through which they were sent or received. An uncategorized account or messages folder lists the folders or messages that
cannot be categorized in any of the found accounts or account folders (Inbox, Outbox, Drafts, and so on).

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s