The UFED Physical Analyzer program has already been described in Chapter 4, Windows Phone and BlackBerry Acquisition. In this chapter, we will describe how to extract data from a Windows Phone physical dump via UFED Physical Analyzer.
As was described in previous chapters, a physical dump of Windows Phone can be obtained by several methods. For example, it can be obtained via the UFED 4PC or JTAG or chip-off methods:
Instructions for creating a physical dump of Windows Phone using UFED 4PC
In this recipe, we will describe the analysis of Windows Phone physical dump using chip-off method.
- Double-click on the icon of the UFED Physical Analyzer program. In order to import data from a Windows Phone physical dump, click
File
andOpen (advanced)
on the toolbar of the program. - In the opened
Open Advanced
window, clickSelect Device
window. In the next window, select the model of the mobile device that corresponds...