Physical extraction

NIST SP 800-101 R1 Level 4 acquisition. Bit-for-bit image of the device's NAND flash, including unallocated space, system partitions and app sandboxes. Requires root, jailbreak, an exploit chain, JTAG, or chip-off depending on the device generation.

Explained in

Mobile Phone Forensics: Acquisition, JTAG and Chip-Off

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.

Continue learning Create Your Account

Physical extraction

Explained in

Related terms

Your journey to becoming a forensic professional starts here.