Difference between revisions of "Chip-Off Forensics"

From ForensicsWiki
Jump to: navigation, search
(Procedures)
m (Definition: flow, generalization, and making it less explicit)
 
(5 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
{{expand}}
 +
 
== Definition ==
 
== Definition ==
=== From Wikipedia ([http://en.wikipedia.org/wiki/Mobile_device_forensics#Forensic_desoldering http://en.wikipedia.org/wiki/Mobile_device_forensics#Forensic_desoldering]): ===
+
Wikipedia on [http://en.wikipedia.org/wiki/Mobile_device_forensics#Forensic_desoldering Forensic desoldering]
  
Commonly referred to as a "Chip-Off" technique within the industry - this is the last and most intrusive method to get a memory image is to desolder the non-volatile memory chip and connect it to a memory chip reader.  This method contains the potential danger of total data destruction: it is possible to destroy the chip and its content because of the heat and possible physical damage from desoldering.
+
<blockquote>
 +
The process is commonly referred to as a "chip-off" technique. The procedure is often the last and often most intrusive method to acquire a non-volatile image from a device. The process involves desoldering the non-volatile memory circuit, and connecting it to a specialized reader for acquisitionIt is possible to destroy the circuit during the processes through physical or heat damage.
 +
</blockquote>
  
 
=== Forensic Application ===
 
=== Forensic Application ===
  
Chip-Off forensics is an acquisition procedure which involves physically removing the NAND or flash IC from a device and reading it directly on an external NAND/Flash reader.  It is considered a last-option technique, as repairing the phone to a working state post-IC removal, is quite difficult.
+
Chip-off forensics is an acquisition procedure which involves physically removing the non-volatile integrated circuit (IC) from a device and reading it directly on an external specialized reader.  It is often considered a last-option technique, as repairing the phone to a working state post-IC removal, is difficult.
  
 
== Tools and Equipment ==
 
== Tools and Equipment ==
Line 15: Line 19:
  
 
* [[Chip-Off BlackBerry Curve 9300]]
 
* [[Chip-Off BlackBerry Curve 9300]]
 +
* [[Chip-Off BlackBerry Curve 9315]]
 +
* [[Chip-Off BlackBerry Curve 9320]]
 
* [[Chip-Off BlackBerry Bold 9780]]
 
* [[Chip-Off BlackBerry Bold 9780]]
 +
 +
== External links ==
 +
* [http://hackaday.com/2015/09/07/understanding-surface-mount/ Understanding surface mount], by Al Williams, September 7, 2015

Latest revision as of 14:39, 30 December 2015

Information icon.png

Please help to improve this article by expanding it.
Further information might be found on the discussion page.

Definition

Wikipedia on Forensic desoldering

The process is commonly referred to as a "chip-off" technique. The procedure is often the last and often most intrusive method to acquire a non-volatile image from a device. The process involves desoldering the non-volatile memory circuit, and connecting it to a specialized reader for acquisition. It is possible to destroy the circuit during the processes through physical or heat damage.

Forensic Application

Chip-off forensics is an acquisition procedure which involves physically removing the non-volatile integrated circuit (IC) from a device and reading it directly on an external specialized reader. It is often considered a last-option technique, as repairing the phone to a working state post-IC removal, is difficult.

Tools and Equipment

Procedures

External links