A friend of mine she was frustarted in extracting WeChat chat messages from suspect's smartphone running Android 7.x. The situation is that no pattern lock/PIN/Password and USB debugging was enabled successfully. She tried every effort but in vain. N…

As we know that WeChat will wipe deleted chat messages. That's why forensic guys could  not dig out any deleted chat messages in EnMicroMsg.db. Is it possible to let those deleted chat messages show up again? For performance's sake, WeChat will creat…

Let me show you the WeChat version first. It is 6.3. What will happen to WeChat deleted chat messages? Take a look at "Blocks containing deleted data" and those deleted messages were wiped. What about WhatsApp? The version is 2.12.317. Fortunate…

Last month Candy was arrested on suspicion of having doing online porn webcam shows, but Candy refused to confess to her crime. The Police extracted data from her iPhone and found lots of chat messages in Skype’s database – main.db. Unfortunately the…

The evidence is iPhone 5s with iOS 9.1 and not jail breaked. I use UFED to do advanced logical extraction just now. All I know is that suspect did use Naver LINE a lot. Unfortunately I did not recover any deleted LINE chat messages after advanced log…

Forensic is a strict science and we should let the evidence speak for itself. Several months ago I still could recovered Line deleted chat messages as below:…

One of my friends asked me to do a favor for her. She said her friend deleted some important chat messages by “accident”, and her friend want to recover those deleted messages as soon as possible… I took a look at this android phone. My God, lots of…

20元现金领取地址:http://jdb.jiudingcapital.com/phone.html内部邀请码:C8E245J (不写邀请码,没有现金送) 国内私募机构九鼎控股打造,九鼎投资是在全国股份转让系统挂牌的公众公司,股票代码为430719,为“中国PE第一股”,市值超1000亿元.   原文地址:http://articles.forensicfocus.com/2014/10/01/decrypt-wechat-enmicromsgdb-database/ WeChat is a s…

One of my friend came to me with an Android phone. She saild somehting wrong with the hardware of her friend's phone, and her friend are eager to backup his data,especially  WeChat chat messages..unfortunatelly her friend forgot the accoutn/password…

Line is one of the most popular messaging Apps, especially in Asia. On March 3 I downgraded the app LINE to an earlier version and extract the database successfully. Later this apk downgrade method feature became available in UFED as shown in UFED 5.…