ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite

ʻOi aku ka paʻakikī o ka unuhi ʻana i ka ʻikepili mai nā polokalamu Android i kēlā me kēia lā - i kekahi manawa ʻoi aku ka paʻakikīma mua o ka iPhone. ʻO Igor Mikhailov, ka mea loea ma ka Group-IB Computer Forensics Laboratory, haʻi iā ʻoe i ka mea e hana ai inā ʻaʻole hiki iā ʻoe ke unuhi i ka ʻikepili mai kāu kelepona Android me ka hoʻohana ʻana i nā ala maʻamau.

I kekahi mau makahiki i hala aku nei, ua kūkākūkā wau a me koʻu mau hoa hana i nā ʻano o ka hoʻomohala ʻana i nā mīkini palekana i nā polokalamu Android a hiki i ka hopena e hiki mai ana ka manawa e lilo ai kā lākou noiʻi forensic i mea paʻakikī ma mua o nā polokalamu iOS. A i kēia lā hiki iā mākou ke ʻōlelo me ka hilinaʻi ua hiki mai kēia manawa.

Ua nānā hou wau i ka Huawei Honor 20 Pro. He aha kou manaʻo i hiki iā mākou ke unuhi mai kāna waihona i loaʻa me ka hoʻohana ʻana i ka pono ADB? ʻAʻohe mea! Ua piha ka mea i ka ʻikepili: kelepona ʻike, puke kelepona, SMS, leka uila, leka uila, faila multimedia, etc. A ʻaʻole hiki iā ʻoe ke lawe i kekahi o kēia. Manaʻo weliweli!

He aha ka hana ma ia ʻano? ʻO kahi hopena maikaʻi ʻo ka hoʻohana ʻana i nā pono hana hoʻopaʻa pono (Mi PC Suite no nā smartphones Xiaomi, Samsung Smart Switch no Samsung, HiSuite no Huawei).

Ma kēia ʻatikala e nānā mākou i ka hana ʻana a me ka unuhi ʻana o nā ʻikepili mai nā smartphones Huawei me ka hoʻohana ʻana i ka pono HiSuite a me kā lākou loiloi hope e hoʻohana ana i ka Belkasoft Evidence Center.

He aha nā ʻano ʻikepili i hoʻokomo ʻia i loko o nā waihona HiSuite?

Hoʻokomo ʻia nā ʻano ʻikepili i loko o nā backup HiSuite:

  • ʻikepili e pili ana i nā moʻokāki a me nā ʻōlelo huna (a i ʻole nā ​​hōʻailona)
  • hoaʻi kikoʻī
  • nā pilikia
  • Nā leka SMS a me MMS
  • e-mail
  • waihona multimedia
  • Waihona waihona
  • nā palapala
  • waihona
  • nā faila noi (nā waihona me nā mea hoʻonui.odex, .so, .apk)
  • ʻike mai nā noi (e like me Facebook, Google Drive, Google Photos, Google Mails, Google Maps, Instagram, WhatsApp, YouTube, etc.)

E nānā i nā kikoʻī hou aku i ke ʻano o ka hana ʻana o ia waihona a pehea e nānā ai me ka hoʻohana ʻana i ka Belkasoft Evidence Center.

Ke kākoʻo nei i kahi kelepona Huawei me ka hoʻohana ʻana i ka pono HiSuite

No ka hana ʻana i kope kope me kahi pono ponoʻī, pono ʻoe e hoʻoiho iā ia mai ka pūnaewele Huawei a hoʻokomo.

ʻO ka palapala hoʻoiho HiSuite ma ka pūnaewele Huawei:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
No ka hoʻopili ʻana i ka hāmeʻa me kahi kamepiula, hoʻohana ʻia ke ʻano HDB (Huawei Debug Bridge). Aia nā ʻōlelo kikoʻī ma ka pūnaewele Huawei a i ʻole ma ka papahana HiSuite ponoʻī e pili ana i ka hoʻolaʻa ʻana i ke ʻano HDB ma kāu kelepona paʻalima. Ma hope o ka ho'ā ʻana i ke ʻano HDB, e hoʻomaka i ka polokalamu HiSuite ma kāu kelepona paʻalima a e hoʻokomo i ke code i hōʻike ʻia ma kēia noi i loko o ka pukaaniani polokalamu HiSuite e holo ana ma kāu kamepiula.

ʻO ka puka makani komo code ma ka mana papapihi o HiSuite:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
I ka wā o ke kaʻina hana hoʻihoʻi, e noi ʻia ʻoe e hoʻokomo i kahi ʻōlelo huna, e hoʻohana ʻia e pale i ka ʻikepili i unuhi ʻia mai ka hoʻomanaʻo ʻana o ka hāmeʻa. Aia ke kope kope i hana ʻia ma ke ala C:/Users/%User profile%/Documents/HiSuite/backup/.

Huawei Honor 20 Pro kākoʻo kelepona:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite

Ke kālailai ʻana i kahi waihona HiSuite me ka hoʻohana ʻana i ka Belkasoft Evidence Center

No ke kālailai ʻana i ka hopena i hoʻopaʻa ʻia me ka hoʻohana ʻana Hale Hōʻikeʻike Belkasoft hana i kahi ʻoihana hou. A laila koho i ke kumu ʻikepili Kiʻi Mobile. Ma ka papa kuhikuhi e wehe ai, e kuhikuhi i ke ala i ka papa kuhikuhi kahi i loaʻa ai ka waihona kelepona a koho i ka faila ʻike.xml.

E wehewehe ana i ke ala i ka waihona:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
Ma ka puka aniani aʻe, e kuhikuhi ka polokalamu iā ʻoe e koho i nā ʻano o nā mea hana āu e pono ai e ʻike. Ma hope o ka hoʻomaka ʻana i ka scan, e hele i ka pā hana he manakia a kaomi i ke pihi E hoʻonohonoho i ka hana, no ka mea, ke manaʻo nei ka polokalamu i kahi ʻōlelo huna e hoʻokaʻawale i ka waihona i hoʻopili ʻia.

pihi E hoʻonohonoho i ka hana:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
Ma hope o ka hoʻokaʻawale ʻana i ka waihona, e noi ʻo Belkasoft Evidence Center iā ʻoe e hōʻike hou i nā ʻano o nā mea pono e pono e unuhi ʻia. Ma hope o ka pau ʻana o ka nānā ʻana, hiki ke ʻike ʻia ka ʻike e pili ana i nā mea kiʻi i unuhi ʻia ma nā pā ʻIkepili hihia и Overview .

Huawei Honor 20 Pro nā hualoaʻa hoʻopaʻa ʻana:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite

Ka nānā ʻana o kahi waihona HiSuite me ka hoʻohana ʻana i ka polokalamu Mobile Forensic Expert

ʻO kekahi papahana forensic hiki ke hoʻohana ʻia e unuhi i ka ʻikepili mai kahi waihona HiSuite "Ka loea Forensic Mobile".

No ka hana ʻana i ka ʻikepili i mālama ʻia i kahi waihona HiSuite, kaomi ma ke koho Ke lawe nei i nā waihona ma ka puka makani papahana nui.

ʻO ka ʻāpana o ka puka makani nui o ka papahana "Mobile Forensic Expert":

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
A i ʻole ma ka ʻāpana Kāpili koho i ke ʻano o ka ʻikepili i lawe ʻia Kākoʻo Huawei:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
Ma ka puka aniani e wehe ai, e kuhikuhi i ke ala i ka faila ʻike.xml. Ke hoʻomaka ʻoe i ke kaʻina hana unuhi, e ʻike ʻia kahi puka aniani kahi e noi ʻia ai ʻoe e hoʻokomo i kahi huaʻōlelo i ʻike ʻia e wehe i ka waihona HiSuite, a i ʻole e hoʻohana i ka hāmeʻa Passware e hoʻāʻo e koho i kēia ʻōlelo huna inā ʻaʻole ʻike ʻia:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite
ʻO ka hopena o ka nānā ʻana i ke kope kope ʻia ʻo ia ka puka aniani o ka polokalamu "Mobile Forensic Expert", e hōʻike ana i nā ʻano o nā mea kiʻi i unuhi ʻia: nā kelepona, nā leka uila, nā faila, ka hānai hanana, ka ʻikepili noi. E nānā i ka nui o ka ʻikepili i unuhi ʻia mai nā noi like ʻole e kēia papahana forensic. Nui wale!

Ka papa inoa o nā ʻano ʻikepili i unuhi ʻia mai ka waihona HiSuite ma ka polokalamu Mobile Forensic Expert:

ʻO ka nānā ʻana forensic o nā kākoʻo HiSuite

Hoʻokaʻawale i nā waihona HiSuite

He aha kāu e hana ai inā ʻaʻole ʻoe i kēia mau papahana maikaʻi? Ma kēia hihia, ua hoʻomohala a mālama ʻia kahi palapala Python e Francesco Picasso, he limahana o Reality Net System Solutions, e kōkua iā ʻoe. Hiki iā ʻoe ke loaʻa kēia palapala ma GitHub, a aia kāna wehewehe kikoʻī i loko 'ōlelo "Huawei backup decryptor."

Hiki ke lawe ʻia mai ka waihona HiSuite decrypted a nānā ʻia me ka hoʻohana ʻana i nā pono forensic maʻamau (e.g. ʻO'Apopia) a i ʻole ma ka lima.

haʻina

No laila, me ka hoʻohana ʻana i ka hāmeʻa hoʻihoʻi HiSuite, hiki iā ʻoe ke unuhi i kahi kauoha o ka nui o ka ʻikepili mai nā smartphones Huawei ma mua o ka lawe ʻana i ka ʻikepili mai nā mea like me ka hoʻohana ʻana i ka pono ADB. ʻOiai ka nui o nā pono hana no ka hana ʻana me nā kelepona paʻalima, ʻo Belkasoft Evidence Center a me Mobile Forensic Expert kekahi o nā papahana forensic liʻiliʻi e kākoʻo ana i ka unuhi a me ka nānā ʻana o nā kākoʻo HiSuite.

Pūnaewele

  1. Ua ʻoi aku ka paʻakikī o nā kelepona Android ma mua o nā iPhones Wahi a kahi Detective
  2. Huawei Hi-Suite
  3. Hale Hōʻikeʻike Belkasoft
  4. He loea Forensic Mobile
  5. Kobackupdec
  6. Huawei hoʻopaʻa decryptor
  7. ʻO'Apopia

Source: www.habr.com

Pākuʻi i ka manaʻo hoʻopuka