Where most digital forensics labs stop, we take it to the next level. Flashback Data can get data from devices that most labs just set aside. We use several advanced techniques in our data recovery lab to assist our forensic investigators with their investigations when our standard forensic tools either do not support a device or cannot get past a passcode-locked device.
To do this we have developed techniques to work with the JTAG or Joint Test Action Group pins on a particular device. Most mobile phones have JTAG pins for the original developer to test the circuit board in the manufacturing process. We use these pins to give us direct access to the flash memory on a device so we can recover the entire contents of the memory. If there is no way to access the memory through JTAG, then we can also try a chip-off recovery.
A more invasive, but very successful method of getting to those very hard to recover or very damaged devices is through the flash memory itself. We have the tools and techniques to do surgery on a mobile device and actually remove the flash memory chip, reconstruct the data, and get you a full investigation.
Modern mobile devices are encrypted by default and the majority of damaged devices can no longer be accessed with chip-off or JTAG techniques. In order to access the data on these damaged devices, advanced microsoldering techniques are needed. We can trace the problem with the phones motherboard and repair it in order to retrieve the data.
These methods, combined with our hard drive data recovery capabilities, make us the most advanced digital forensics lab in the world. We have found these very helpful for our partners in law enforcement as well.
If you or your agency need assistance with advanced mobile forensics, feel free to contact us anytime at 866-786-5700.