By John Ahearne, Forensic Analyst When data is is needed for use as evidence, it…
Data recovery company uses JTAG, chip-off and proprietary capabilities to retrieve “unrecoverable” data for law enforcement
(NOVATO, Calif. Sept. 1, 2015) DriveSavers, the worldwide leader in data recovery, eDiscovery and digital forensic solutions, today announced new capabilities in accessing data from anonymous prepaid cell phones, often referred to in law enforcement as “burner phones.” Such devices contain previously unattainable data typically required by law enforcement and the judicial system.
There are tens of millions of prepaid cell phones in use, developed and manufactured by hundreds of different companies. Each of these devices is equipped with a NAND flash chip that may be unique to its manufacturer or version that requires equally unique tools and techniques to perform recovery. Essentially, every different model of prepaid cell phone, or burner phone, may require its own research and development, making it very difficult and time consuming to access data. Often, internal teams from local law enforcement are unable to perform recovery on these devices due to limited manpower and resources.
By way of chip-off technology, the removal of NAND flash storage chips for data recovery purposes, and JTAG, a method primarily used in testing and development, DriveSavers can access data from notoriously inaccessible devices. Utilizing specialized forensic tools and industry leading software from Cellebrite, a mobile forensics partner, engineers at DriveSavers can then perform analysis on the recovered data.
“Our proprietary capabilities and techniques allow us to tackle recovery most others cannot,” said Chris Bross, chief technology officer at DriveSavers. “Just like a seasoned chef, our R&D team must regularly create entirely new recipes when working with these burner devices.”
DriveSavers helped pioneer the data recovery service industry 30 years ago, and added the eDiscovery and digital forensics divisions as technology became integral in legal and criminal cases. DriveSavers is the only data recovery company to post proof of an annual, company-wide SOC 2 Type II security audit and its services meet the security protocols for financial, government, corporate and healthcare industries.
DriveSavers will be an exhibitor at the annual HTCIA trade show, the largest conference for cyber security and DFIR professionals, held at Rosen Single Creek Resort in Orlando August 30–September 2, 2015. In addition, Chris Bross and Rene Novoa, digital forensics manager at DriveSavers and 2nd vice president of the Bay Area chapter of HTCIA, will be speaking on advanced forensic capabilities for mobile device recovery, such as chip-offs and JTAG.
To learn more about DriveSavers data recovery expertise, visit drivesaversdatarecovery.com.
To learn more about DriveSavers eDiscovery and digital forensic solutions, visit www.drivesaversediscovery.com.
DriveSavers, the worldwide leader in data recovery, eDiscovery and digital forensics, provides the fastest, most reliable and only certified secure data recovery and eDiscovery service in the industry. All of the company’s services meet security protocols for financial, legal, corporate, and healthcare industries and it is the only company that posts proof of its annual SOC 2 Type II audit and HIPAA data security and privacy compliance. DriveSavers adheres to U.S. Government security protocols, the Gramm-Leach-Bliley Act (GLBA) Data Security Rule, the Data-At-Rest mandate (DAR) and the Sarbanes-Oxley Act (SOX). DriveSavers engineers are trained and certified in all leading encryption and forensic technologies and operate a Certified ISO Class 5 Cleanroom. Customers include Bank of America, Google, Lucasfilm, NASA, Harvard University, St. Jude Children’s Research Hospital, U.S. Army and Sandia National Laboratories.