Re: Retrieve deleted data from a mobile phone

From: \\BILL <opticfiber(at)topsight.net>
Date: Mon Jul 07 2003 - 15:00:14 EDT

Those type of devices normally use flash type memory as opposed to magnetic media used for floppy disks and hard drives the difrence being that once a file is completly deleted it can still be recovered from magnetic media because of the ghost image of the data left on the media this however doesn't mean that data can't be recovered from flash type memory devices. "Normally" when you delete a file, be it pda, digital camera, or computer the only thing that's physically deleted is the file table entry saying the file exists. And so, data can be recovered from flash type memory by observing and analyzing the raw data on the storage medium. A quick search on google revealed several companies that specialize in recovering data from the flash cards and pdas(listed below)

http://www.swstars.com/services/shipping/index.htmlhttp://www.drlabs.com/http://www.flash-card-recovery.co.uk/services.htm

William F. Reyor
http://www.topsight.net

• Original Message ----- From: "Martin Meier" <martin.me@gmx.ch> To: <forensics@securityfocus.com> Sent: Monday, July 07, 2003 9:15 AM Subject: [normal] Retrieve deleted data from a mobile phone

>
>
> Hello,

---

This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com Received on Tue Jul 8 13:02:19 2003