The purpose of this chapter is to introduce Windows Phone 8 (WP8). In the first part of this chapter, we will see the main differences between WP7 and WP8. Further on, we will go through Windows 8 internals and describe the WP8 security models and their implementation. This chapter will also describe the WP filesystem, following which we will go through the steps to logically acquire a Windows Phone 8 device and describe WP PINs and hardware encryption. We will also describe evidence location in the Windows Phone registry and analyze the Windows Phone PIN.
This chapter will cover the following topics:
Windows Phone 8 internals
Partitions and the filesystem
Windows Phone 8 security models
Windows Phone 8 data protection
Windows Phone 8 logical acquisition
Windows Phone cloud acquisition
JTAG and physical acquisition
Artifact location and user PIN study