Information Technology Reference
In-Depth Information
Standard acquisition methods
Standard forensic acquisition methods can be applied to BlackBerry devices. However, en-
crypted and locked devices may not be possible to acquire, and it will be even more diffi-
cult (if not impossible) to analyze whether the password or encryption keys are present.
The level of acquisition support available depends on the forensic kit, the device model,
and the security level currently being used on the BlackBerry device. As explained in pre-
vious chapters, logical and physical (to include file system) acquisition methods are pos-
sible on BlackBerry devices. The Cellebrite UFED Touch provides the greatest level of
physical acquisition support for BlackBerry devices (at the time of writing this). The fol-
lowing two images show the different support provided by the Cellebrite UFED Touch on
two different models of BlackBerry.
Note that one model has full acquisition support while the other only offers logical acquisi-
tion.
The BlackBerry Z10 support in Cellebrite UFED Touch
Search WWH ::




Custom Search