Information Technology Reference
In-Depth Information
The following image shows that the BlackBerry Z10 device can only be logically acquired
using the Cellebrite UFED Touch. When attempting to acquire a BlackBerry 8300 using
the UFED Touch, logical, physical, and file system acquisition support is possible, as
shown in the following image:
The BlackBerry Curve support in Cellebrite UFED Touch
The device passcode must be known for physical acquisition. This is one of the major dif-
ferences between BlackBerry's physical acquisition and Android and iOS. Keep in mind
even if a BlackBerry device is physically acquired, any tool currently available to forensic
examiners may not support the analysis portion. These challenges will be discussed in the
analysis section. Logical support for BlackBerry devices is more common and is suppor-
ted by most commercial forensic tools to include Oxygen Forensics, Microsystemation
XRY, Cellebrite UFED Touch, and more. Most BlackBerry support provided by commer-
