By John Ahearne, Forensic Analyst When data is is needed for use as evidence, it…
DriveSavers Performs Recoveries of Cell Phones Considered Inaccessible
Originally published by Storage Newsletter.
Using JTAG, chip-off and proprietary capabilities to retrieve “unrecoverable” data for law enforcement
DriveSavers, Inc., in data recovery, eDiscovery and digital forensic services, announced new capabilities in accessing data from anonymous prepaid cell phones, often referred to in law enforcement as ‘burner phones.’
Such devices contain previously unattainable data typically required by law enforcement and the judicial system. There are tens of millions of prepaid cell phones in use, developed and manufactured by hundreds of different companies. Each of these devices is equipped with a NAND flash chip that may be unique to its manufacturer or version that requires equally unique tools and techniques to perform recovery. Essentially, every different model of prepaid cell phone, or burner phone, may require its own R&D, making it difficult and time consuming to access data. Often, internal teams from local law enforcement are unable to perform recovery on these devices due to limited manpower and resources.
By way of chip-off technology, the removal of NAND flash storage chips for data recovery purposes, and JTAG, a method primarily used in testing and development, DriveSavers can access data from notoriously inaccessible devices. Utilizing specialized forensic tools and industry software from Cellebrite Ltd., a mobile forensics partner, engineers at DriveSavers can then perform analysis on the recovered data.
“Our proprietary capabilities and techniques allow us to tackle recovery most others cannot,” said Chris Bross, CTO, DriveSavers. “Just like a seasoned chef, our R&D team must regularly create entirely new recipes when working with these burner devices.“
DriveSavers helped pioneer the data recovery service industry 30 years ago, and added the eDiscovery and digital forensics divisions as technology became integral in legal and criminal cases. DriveSavers is the only data recovery company to post proof of an annual, company-wide SOC 2 Type II security audit and its services meet the security protocols for financial, government, corporate and healthcare industries.
DriveSavers exhibited at the annual HTCIA trade show, the largest conference for cyber security and DFIR professionals, held at Rosen Single Creek Resort in Orlando August 30-September 2, 2015.
Related Posts
