Windows Phone physical dump parsing with UFED Physical Analyzer

The UFED Physical Analyzer program has already been described in Chapter 4, Windows Phone and BlackBerry Acquisition. In this chapter, we will describe how to extract data from a Windows Phone physical dump via UFED Physical Analyzer.

Getting ready

As was described in previous chapters, a physical dump of Windows Phone can be obtained by several methods. For example, it can be obtained via the UFED 4PC or JTAG or chip-off methods:

Instructions for creating a physical dump of Windows Phone using UFED 4PC

In this recipe, we will describe the analysis of Windows Phone physical dump using chip-off method.

How to do it…

1. Double-click on the icon of the UFED Physical Analyzer program. In order to import data from a Windows Phone physical dump, click File and Open (advanced) on the toolbar of the program.
2. In the opened Open Advanced window, click Select Device window. In the next window, select the model of the mobile device that corresponds...