MOBILE FORENSICS

Physical removal of a smartphone

For many years, physical extraction was regarded as the most comprehensive method of backing up data from mobile devices. However, with the advent of modern security mechanisms, its practical significance has changed. Nevertheless, it is important to understand what is meant by physical extraction and when it can still be used today.

Forensic analysis
Documentation admissible in court
GDPR-compliant processing
Experienced experts

TECHNICAL BACKGROUND

Technical Fundamentals

The development of modern security architectures means that, in many cases, other methods – in particular the full file system approach – represent a more practical solution.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Before each analysis begins, an assessment is carried out to determine which extraction method is technically feasible and suitable for the specific purpose. The focus is on traceability, integrity and legally admissible documentation.

TYPICAL QUESTIONS

When is this analysis required?

Older smartphones, special cases of data recovery, scientific investigations and specific forensic scenarios may make physical extraction a viable option. Whether this is technically feasible must always be assessed on a case-by-case basis.

LIMITATIONS & CONCLUSION

What you should know

Modern smartphones feature robust hardware and file encryption, Secure Enclave, TrustZone and other security features. These make it considerably more difficult or even impossible to carry out a complete physical data backup.

Physical extraction remains an important technique in mobile IT forensics; however, due to modern security mechanisms, it is no longer feasible for every device. The choice of the appropriate method is always made on a case-by-case basis.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Do you have any questions? Please contact us for a free initial consultation.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

What does ‘bit-accurate’ mean?
The memory is backed up at block level as comprehensively as possible.
Is physical extraction always possible?
No. Modern security measures can prevent this.
Is physical extraction better than FFS?
Not necessarily. Which method is appropriate depends on the individual case.
Is deleted data found automatically?
No. Data backup is merely the basis for subsequent analysis.
Can a physical extraction be used in court?
Yes, provided it was carried out and documented in accordance with best practice.