Link to home
Start Free TrialLog in
Avatar of Gary Fuqua, CISSP
Gary Fuqua, CISSPFlag for United States of America

asked on

Recovering data from a Nokia phone

I have been asked by an attorney to determine how to recover data from a Nokia phone:

Emails
Phone call list
Text messages
Etc.

Does anyone have a suggestion on where to even start with this?     Could we subpoena the phone company for this information as it is part of an active investigation?    I will have the model number shortly and will post it.  

Avatar of lherrou
lherrou
Flag of Ukraine image

GaryFuqua,

First of all, don't turn it on (if it's already off) until we know more. The model number will be critical. As for the data, some of that will be on the phone (recent txt messages or emails, and a list of recent calls). You can subpoena the provider for the full phone records, which will list calls and txt messages made to or from the phone (and who they were to or from). It will not show emails or other data use, nor will it show the contents of the text messages.

Cheers,
LHerrou
ASKER CERTIFIED SOLUTION
Avatar of James Williams
James Williams
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
One more thing DO Wait for lherrou to respond if this is of some importance. He may have a better solution.
Avatar of Gary Fuqua, CISSP

ASKER

lherrou,

The subpeona is in process.  

selvol,

You make an excellent point about forensic investigators.    This info could ultimately end up being used in court, so if you have a link to some "best practices" or "rules", they would be greatly appreciated.     I think the chain of custody might already be impaired since the phone is in the hands of the defense attorney and wasn't collected by the police.          I am not an attorney, so I'm not sure how this part should work.      The defense attorney just asked me if I could recover the data from the phone.    I don't have the phone...yet.    But once I get it,  I assume I would just document my procedures, and not do anything to alter the source data.  



I have read several booklets on computer Forensic / Data recovery. And all of them mentioned the procedures for Forensics evidence collection.  I sounds like the lawyer knows that it is not an issue in court . And Most likely just wants to see what is on the phone..
Search        Scribd.com
Many books on this...
http://www.scribd.com/doc/15490874/iPhone-Forensics-by-OReilly-Media
 
Selvol

It might also be good that it was not collected by the police. Or that the police have no knowledge of this phone.  It is most likely only going to come out in court if the  records from the phone company are in the favor of the client. And can help prove something that is in his favor.  The phone company records an be used in court as they are....   But that's really just pure speculation.
Just pop the sim card out..
I plead the 5th.
 
Selvol


SIMCARD-LOCK

The code to read out the sim-lock status of your phone could but not always be.

 

#PW+(MASTERCODE)+(Y)#

# = DOUBLE-CROSS

W = PRESS "*" THREE TIMES

P = PRESS "*" FOUR TIMES

+ = PRESS "*" TWO TIMES

MASTERCODE = 1234567890

Y = NUMBER 1 TO 4

The master code is a secret code. The code has 10 digits, To read out the sim-lock status you can enter every combination you want!
I am still waiting for the phone, so no updates on this yet....
Still waiting for the phone.