Quantcast
Channel: Forensic Focus Forums - Recent Topics
Viewing all articles
Browse latest Browse all 20107

Mobile Phone Forensics: Samsung Tocco Lite Decode

$
0
0
This specific model physical extraction is without the NAND flash spare area. This means that a file system cannot be reconstructed and you can only use carving to get data out of this model physical extraction. There is no solution (beside chip-off and possibly JTAG) to get a physical with the flash spare area. There are only about 2 other models that we use that specific extraction method that cannot produce a file system decoding. Hope this helps. Ron

Viewing all articles
Browse latest Browse all 20107

Trending Articles