首页 > 其他 > 详细

Use EnCase to acquire data from a smartphone

时间:2015-12-24 23:43:22      阅读:326      评论:0      收藏:0      [点我收藏+]

Yesterday someone asked me a question can EnCase acquire data from a smartphone, and my reply was "yes". Let me show you how to use Use EnCase to acquire data from a smartphone. Of course we have to install driver on the workstation first so that we could identify that smartphone correctly. If the smartphone is rooted, we could do the physical acquisition and generate E01 images for further analysis.

技术分享

 

Let‘s take a look in the evidence file and find out where Naver LINE database is. The database name is "naver_line" and we could open this file by using external viewer-DB Browser for SQLite. Now we could see those chat messages in talbe "chat_history".

技术分享

Use EnCase to acquire data from a smartphone

原文:http://www.cnblogs.com/pieces0310/p/5074469.html

(0)
(0)
   
举报
评论 一句话评论(0
关于我们 - 联系我们 - 留言反馈 - 联系我们:wmxa8@hotmail.com
© 2014 bubuko.com 版权所有
打开技术之扣,分享程序人生!