The UFED Physical Analyzer program has already been described in Chapter 4, Windows Phone and BlackBerry Acquisition. In this chapter, we will describe how to extract data from a Windows Phone physical dump via UFED Physical Analyzer.
Windows Phone physical dump parsing with UFED Physical Analyzer
Getting ready
As was described in previous chapters, a physical dump of Windows Phone can be obtained by several methods. For example, it can be obtained via the UFED 4PC or JTAG or chip-off methods:
Instructions for creating a physical dump of Windows Phone using UFED 4PC
In this recipe, we will describe the analysis of Windows Phone physical dump using chip-off method.
