{"id":74539,"date":"2020-03-18T08:42:40","date_gmt":"2020-03-18T05:42:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kriminalisticheskij-analiz-rezervnyh-kopij-hisuite"},"modified":"2020-03-18T08:42:40","modified_gmt":"2020-03-18T05:42:40","slug":"kriminalisticheskij-analiz-rezervnyh-kopij-hisuite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kriminalisticheskij-analiz-rezervnyh-kopij-hisuite","title":{"rendered":"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/c3882ae5966931441b82893a077e4273.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAz adatkinyer\u00e9s Android-eszk\u00f6z\u00f6kr\u0151l napr\u00f3l napra egyre nehezebb - n\u00e9ha m\u00e9g <noindex><a rel=\"nofollow\" href=\"https:\/\/www.somagnews.com\/android-phones-hacked-harder-iphones-according-detective\/\">nehezebb<\/a><\/noindex>, mint az iPhone-r\u00f3l. <b>Igor Mihajlov, a Group-IB Sz\u00e1m\u00edt\u00f3g\u00e9pes Kriminalisztikai Laborat\u00f3rium szak\u00e9rt\u0151je,<\/b> a k\u00f6vetkez\u0151ket mes\u00e9li el, mit tegyen, ha nem tud adatokat kinyerni egy Android okostelefonb\u00f3l a szok\u00e1sos m\u00f3don.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>N\u00e9h\u00e1ny \u00e9vvel ezel\u0151tt koll\u00e9g\u00e1immal arr\u00f3l besz\u00e9lgett\u00fcnk, hogy az Android-eszk\u00f6z\u00f6k biztons\u00e1gi mechanizmusainak fejl\u0151d\u00e9se azt fogja eredm\u00e9nyezni, hogy a kriminalisztikai vizsg\u00e1latuk nehezebb\u00e9 v\u00e1lik, mint az iOS-eszk\u00f6z\u00f6k eset\u00e9ben. Ma magabiztosan mondhatjuk, hogy ez az id\u0151 el\u00e9rkezett. <\/p>\n<p>Nemr\u00e9giben a Huawei Honor 20 Pro-t vizsg\u00e1ltam. Gondolja, mit siker\u00fclt kinyerni az ADB seg\u00e9dprogrammal k\u00e9sz\u00edtett biztons\u00e1gi m\u00e1solat\u00e1b\u00f3l? Semmit! Az eszk\u00f6z tele van adatokkal: h\u00edv\u00e1sinform\u00e1ci\u00f3k, telefonk\u00f6nyv, SMS, \u00fczenetek a cseveg\u0151alkalmaz\u00e1sokban, e-mail, multim\u00e9di\u00e1s f\u00e1jlok stb. \u00c9s ezekb\u0151l semmit sem tud kib\u00e1ny\u00e1szni. Borzalmas \u00e9rz\u00e9s!<\/p>\n<p>Mit tegy\u00fcnk egy ilyen helyzetben? J\u00f3 megold\u00e1s a gy\u00e1rt\u00f3i biztons\u00e1gi ment\u00e9si seg\u00e9dprogramok haszn\u00e1lata (Mi PC Suite - Xiaomi okostelefonokhoz, Samsung Smart Switch - Samsung sz\u00e1m\u00e1ra, HiSuite - Huawei sz\u00e1m\u00e1ra). <\/p>\n<p>Ebben a cikkben megvizsg\u00e1ljuk a Huawei okostelefonok biztons\u00e1gi m\u00e1solat\u00e1nak l\u00e9trehoz\u00e1s\u00e1t \u00e9s adatainak kinyer\u00e9s\u00e9t a HiSuite haszn\u00e1lat\u00e1val, valamint ezt k\u00f6vet\u0151 elemz\u00e9s\u00fcket a Belkasoft Evidence Center seg\u00edts\u00e9g\u00e9vel.<\/p>\n<h2>Milyen t\u00edpus\u00fa adatok ker\u00fclnek a HiSuite biztons\u00e1gi m\u00e1solataiba? <br \/>\n<\/h2>\n<p>\nA HiSuite biztons\u00e1gi m\u00e1solataiba a k\u00f6vetkez\u0151 t\u00edpus\u00fa adatok ker\u00fclnek:<\/p>\n<ul>\n<li>fi\u00f3k- \u00e9s jelsz\u00f3adatok (vagy tokenek)<\/li>\n<li>kapcsolatok<\/li>\n<li>h\u00edv\u00e1sok<\/li>\n<li>SMS- \u00e9s MMS-\u00fczenetek<\/li>\n<li>e-mailek<\/li>\n<li>multim\u00e9di\u00e1s f\u00e1jlok<\/li>\n<li>adatb\u00e1zis<\/li>\n<li>dokumentumok<\/li>\n<li>arch\u00edvumok<\/li>\n<li>alkalmaz\u00e1sf\u00e1jlok (f\u00e1jlok kiterjeszt\u00e9sei<b>.odex<\/b>, <b>.so<\/b>, <b>.apk<\/b>)<\/li>\n<li>alkalmaz\u00e1sokb\u00f3l sz\u00e1rmaz\u00f3 inform\u00e1ci\u00f3k (mint p\u00e9ld\u00e1ul Facebook, Google Drive, Google Photos, Google Mails, Google Maps, Instagram, WhatsApp, YouTube stb.)<\/li>\n<\/ul>\n<p>\nR\u00e9szletesebben is megvizsg\u00e1ljuk, hogyan k\u00e9sz\u00fcl el egy ilyen biztons\u00e1gi m\u00e1solat \u00e9s hogyan elemezhet\u0151 a Belkasoft Evidence Center seg\u00edts\u00e9g\u00e9vel.<\/p>\n<h2>A Huawei okostelefon biztons\u00e1gi m\u00e1solat\u00e1nak l\u00e9trehoz\u00e1sa a HiSuite seg\u00e9dprogrammal<br \/>\n<\/h2>\n<p>\nAz \u00fczleti seg\u00e9dprogram l\u00e9trehoz\u00e1s\u00e1hoz el\u0151sz\u00f6r le kell t\u00f6lteni a weboldalr\u00f3l, <noindex><a rel=\"nofollow\" href=\"https:\/\/consumer.huawei.com\/ru\/support\/hisuite\/\">Huawei<\/a><\/noindex> majd telep\u00edteni kell. <\/p>\n<p>A HiSuite program let\u00f6lt\u00e9si oldala a Huawei weboldal\u00e1n:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/e08089bf9cd743c0e60268e9548fa317.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA k\u00e9sz\u00fcl\u00e9k sz\u00e1m\u00edt\u00f3g\u00e9pre csatlakoztat\u00e1s\u00e1hoz HDB (Huawei Debug Bridge) m\u00f3dot haszn\u00e1lunk. A Huawei weboldal\u00e1n vagy a HiSuite programban r\u00e9szletes \u00fatmutat\u00f3 tal\u00e1lhat\u00f3 a HDB m\u00f3d aktiv\u00e1l\u00e1s\u00e1r\u00f3l a mobilk\u00e9sz\u00fcl\u00e9ken. A HDB m\u00f3d aktiv\u00e1l\u00e1sa ut\u00e1n ind\u00edtsa el a HiSuite alkalmaz\u00e1st a mobilk\u00e9sz\u00fcl\u00e9ken, \u00e9s \u00edrja be a programban megjelen\u0151 k\u00f3dot a HiSuite sz\u00e1m\u00edt\u00f3g\u00e9pen fut\u00f3 ablak\u00e1ba.<\/p>\n<p>K\u00f3dbeviteli ablak a HiSuite asztali verzi\u00f3j\u00e1ban:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/4cea5c431521a48df4a2e2d83fb6b733.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA biztons\u00e1gi m\u00e1solat l\u00e9trehoz\u00e1sakor meg kell adni a jelsz\u00f3t, amely a k\u00e9sz\u00fcl\u00e9k mem\u00f3ri\u00e1j\u00e1b\u00f3l kinyert adatok v\u00e9delm\u00e9re szolg\u00e1l. A l\u00e9trehozott biztons\u00e1gi m\u00e1solat a k\u00f6vetkez\u0151 helyen lesz el\u00e9rhet\u0151: <b>C:\/Users\/%User profile%\/Documents\/HiSuite\/backup\/<\/b>.<\/p>\n<p>Huawei Honor 20 Pro okostelefon biztons\u00e1gi m\u00e1solata:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/e36917a999c44e22fa623d8c1653e4f7.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>A HiSuite biztons\u00e1gi m\u00e1solat\u00e1nak elemz\u00e9se a Belkasoft Evidence Center seg\u00edts\u00e9g\u00e9vel<br \/>\n<\/h2>\n<p>\nA kapott biztons\u00e1gi m\u00e1solat elemz\u00e9s\u00e9hez <noindex><a rel=\"nofollow\" href=\"https:\/\/belkasoft.com\/ru\/ec\">Belkasoft Evidence Center<\/a><\/noindex> \u00faj \u00fcgyet kell l\u00e9trehozni. Ezut\u00e1n az adatforr\u00e1sok k\u00f6z\u00fcl v\u00e1lassza a <b>Mobile Image<\/b>. Az el\u0151ugr\u00f3 men\u00fcben adja meg a k\u00f6nyvt\u00e1r el\u00e9r\u00e9si \u00fatj\u00e1t, ahol a mobiltelefon biztons\u00e1gi m\u00e1solata tal\u00e1lhat\u00f3, \u00e9s v\u00e1lassza ki a f\u00e1jlt: <b>info.xml<\/b>.<\/p>\n<p>A biztons\u00e1gi m\u00e1solat el\u00e9r\u00e9si \u00fatj\u00e1nak megad\u00e1sa:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/25a387148a42afa9a397cc46013bb0e8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA k\u00f6vetkez\u0151 ablakban a program felaj\u00e1nlja a megtal\u00e1land\u00f3 artefaktumt\u00edpusok kiv\u00e1laszt\u00e1s\u00e1t. A vizsg\u00e1lat megkezd\u00e9se ut\u00e1n l\u00e9pjen a <b>Task Manager<\/b> f\u00fclre, \u00e9s kattintson a <b>Configure task<\/b>gombra, mivel a program jelsz\u00f3 megad\u00e1s\u00e1t v\u00e1rja a titkos\u00edtott biztons\u00e1gi m\u00e1solat dek\u00f3dol\u00e1s\u00e1hoz. <\/p>\n<p>Gomb <b>Configure task<\/b>:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/cdc9162c837e442e66326bc92813a1c6.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA biztons\u00e1gi m\u00e1solat dek\u00f3dol\u00e1sa ut\u00e1n a Belkasoft Evidence Center \u00fajra k\u00e9ri az kinyert artefaktumt\u00edpusok megad\u00e1s\u00e1t. Az elemz\u00e9s befejez\u00e9se ut\u00e1n az kinyert artefaktumok inform\u00e1ci\u00f3j\u00e1t a <b>Case Explorer<\/b> \u00e9s <b>\u00c1ttekint\u00e9s <\/b>.<\/p>\n<p>A Huawei Honor 20 Pro biztons\u00e1gi m\u00e1solat\u00e1nak elemz\u00e9s\u00e9nek eredm\u00e9nyei:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/fbd2dd97a9a4ae16b9e45d9607472e0b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>A HiSuite biztons\u00e1gi m\u00e1solat\u00e1nak elemz\u00e9se a 'Mobil Kriminalista Szak\u00e9rt\u0151' programmal<br \/>\n<\/h2>\n<p>\nEgy m\u00e1sik kriminalisztikai program, amellyel a HiSuite biztons\u00e1gi m\u00e1solat\u00e1b\u00f3l adatokat lehet kinyerni, a <noindex><a rel=\"nofollow\" href=\"https:\/\/www.oxygensoftware.ru\/ru\/\">'Mobil Kriminalista Szak\u00e9rt\u0151'<\/a><\/noindex>. <\/p>\n<p>A HiSuite biztons\u00e1gi m\u00e1solat\u00e1nak feldolgoz\u00e1s\u00e1hoz kattintson az 'Import\u00e1l\u00e1s biztons\u00e1gi m\u00e1solatok' lehet\u0151s\u00e9gre a program f\u0151ablak\u00e1ban. <b>Import\u00e1l\u00e1s biztons\u00e1gi m\u00e1solatok<\/b> A 'Mobil Kriminalista Szak\u00e9rt\u0151' program f\u0151ablak\u00e1nak r\u00e9szlete: <\/p>\n<p>Vagy az 'Import\u00e1l\u00e1s' szekci\u00f3 alatt v\u00e1lassza ki az import\u00e1lni k\u00edv\u00e1nt adat t\u00edpus\u00e1t.<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/d9c3ba424a55e32d4e78027c836ba509.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nHuawei biztons\u00e1gi m\u00e1solat <b>A megjelen\u0151 ablakban adja meg a f\u00e1jl el\u00e9r\u00e9si \u00fatj\u00e1t.<\/b> v\u00e1lassza ki az import\u00e1land\u00f3 adatok t\u00edpus\u00e1t <b>Huawei biztons\u00e1gi m\u00e1solat<\/b>:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/18eca6771d4d0b4bf9b2f534fd3b3482.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA megny\u00edl\u00f3 ablakban adja meg a f\u00e1jl el\u00e9r\u00e9si \u00fatj\u00e1t <b>info.xml<\/b>A folyamat elind\u00edt\u00e1sakor megjelenik egy ablak, amelyben felaj\u00e1nlj\u00e1k, hogy adja meg a HiSuite biztons\u00e1gi ment\u00e9s\u00e9nek visszafejt\u00e9s\u00e9hez sz\u00fcks\u00e9ges jelsz\u00f3t, vagy alkalmazza a Passware c\u00e9g eszk\u00f6z\u00e9t, hogy megpr\u00f3b\u00e1lja kital\u00e1lni ezt a jelsz\u00f3t, ha az ismeretlen:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/df2ef6cfc2ac8389e61373f446f9fc33.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nA biztons\u00e1gi ment\u00e9s elemz\u00e9s\u00e9nek eredm\u00e9nyek\u00e9nt a \u201eMobil K\u00e9mikus Expert\u201d program ablak\u00e1ban l\u00e1that\u00f3ak a kinyert artefaktumok t\u00edpusai: h\u00edv\u00e1sok, kapcsolatok, \u00fczenetek, f\u00e1jlok, esem\u00e9nysor, alkalmaz\u00e1sadatok. Vegye figyelembe az adat mennyis\u00e9g\u00e9t, amelyet ez a kriminalisztikai program k\u00fcl\u00f6nb\u00f6z\u0151 alkalmaz\u00e1sokb\u00f3l kinyert. Egyszer\u0171en hatalmas! <\/p>\n<p>A HiSuite biztons\u00e1gi ment\u00e9s\u00e9b\u0151l kinyert adatfajt\u00e1k list\u00e1ja a \u201eMobil K\u00e9mikus Expert\u201d programban:<\/p>\n<p><img decoding=\"async\" alt=\"A HiSuite biztons\u00e1gi m\u00e1solatainak kriminalisztikai elemz\u00e9se\" src=\"\/wp-content\/uploads\/2020\/03\/3eb376d71415be09523a0427e3085518.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h2>HiSuite biztons\u00e1gi ment\u00e9sek visszafejt\u00e9se<br \/>\n<\/h2>\n<p>\nMi a teend\u0151, ha nem rendelkezik ezekkel a csod\u00e1latos programokkal? Ebben az esetben seg\u00edteni fog egy Python-kript, amelyet Francesco Picasso, a Reality Net System Solutions munkat\u00e1rsa fejlesztett \u00e9s t\u00e1mogatott. Ezt a szkriptet a k\u00f6vetkez\u0151k\u00f6n tal\u00e1lja: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RealityNet\/kobackupdec\">GitHub<\/a><\/noindex>, r\u00e9szletesebb le\u00edr\u00e1s\u00e1t pedig itt: <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.digital-forensics.it\/2019\/07\/huawei-backup-decryptor.html\">a Spotify d\u00f6nt\u00e9shozatali m\u00f3dszertan\u00e1r\u00f3l. Egyre t\u00f6bb felhaszn\u00e1l\u00f3 prefer\u00e1lja a zenehallgat\u00e1st mobilon a streaming szolg\u00e1ltat\u00e1sban, de a c\u00e9gn\u00e9l t\u00falnyom\u00f3r\u00e9szt webprogramoz\u00f3k dolgoznak. A Spotify elemezte ezt a helyzetet, \u00e9s \u00fagy d\u00f6nt\u00f6tt, hogy t\u00f6bb mobilfejleszt\u0151t vesz fel, valamint \u00e1tnevezi a webes szakembereket \u00faj ir\u00e1nyba:<\/a><\/noindex> \u201eHuawei backup decryptor\u201d.<\/p>\n<p>A visszafejtett HiSuite biztons\u00e1gi ment\u00e9s k\u00e9s\u0151bb import\u00e1lhat\u00f3 \u00e9s elemezhet\u0151 klasszikus kriminalisztikai eszk\u00f6z\u00f6kkel (p\u00e9ld\u00e1ul: <noindex><a rel=\"nofollow\" href=\"https:\/\/www.sleuthkit.org\/autopsy\/\">Autopsy<\/a><\/noindex>) vagy manu\u00e1lisan.<\/p>\n<h2>K\u00f6vetkeztet\u00e9sek<\/h2>\n<p>\n\u00cdgy teh\u00e1t a HiSuite biztons\u00e1gi ment\u00e9si eszk\u00f6z haszn\u00e1lat\u00e1val a Huawei okostelefonokb\u00f3l sokkal t\u00f6bb adatot lehet kinyerni, mint az ADB eszk\u00f6z haszn\u00e1lat\u00e1val ugyanazokb\u00f3l a k\u00e9sz\u00fcl\u00e9kekb\u0151l. A mobiltelefonokkal val\u00f3 munk\u00e1hoz el\u00e9rhet\u0151 sok eszk\u00f6z ellen\u00e9re a Belkasoft Evidence Center \u00e9s a \u201eMobil K\u00e9mikus Expert\u201d az egyike azon kev\u00e9s kriminalisztikai programoknak, amelyek t\u00e1mogatj\u00e1k a HiSuite biztons\u00e1gi ment\u00e9sek kinyer\u00e9s\u00e9t \u00e9s elemz\u00e9s\u00e9t. <\/p>\n<p><b class=\"spoiler_title\">Forr\u00e1sok<\/b><\/p>\n<ol>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.somagnews.com\/android-phones-hacked-harder-iphones-according-detective\/\">Az Android telefonokat nehezebb felt\u00f6rni, mint az iPhone-okat, egy nyomoz\u00f3 szerint <\/a><\/noindex>\n <\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/consumer.huawei.com\/ru\/support\/hisuite\/\">Huawei HiSuite <\/a><\/noindex>\n <\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/belkasoft.com\/ru\/ec\">Belkasoft Evidence Center<\/a><\/noindex>\n <\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.oxygensoftware.ru\/ru\/\">Mobil K\u00e9mikus Expert <\/a><\/noindex>\n <\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/RealityNet\/kobackupdec\">Kobackupdec <\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/blog.digital-forensics.it\/2019\/07\/huawei-backup-decryptor.html\">Huawei backup decryptor <\/a><\/noindex>\n <\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/www.sleuthkit.org\/autopsy\/\">Autopsy <\/a><\/noindex><\/li>\n<\/ol>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/group-ib\/blog\/491122\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441 \u043a\u0430\u0436\u0434\u044b\u043c \u0434\u043d\u0435\u043c \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0432\u0441\u0435 \u0431\u043e\u043b\u0435\u0435 \u0441\u043b\u043e\u0436\u043d\u044b\u043c \u2014 \u043f\u043e\u0440\u043e\u0439 \u0434\u0430\u0436\u0435 \u0441\u043b\u043e\u0436\u043d\u0435\u0435, \u0447\u0435\u043c \u0438\u0437 iPhone. \u0418\u0433\u043e\u0440\u044c \u041c\u0438\u0445\u0430\u0439\u043b\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442 \u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043d\u043e\u0439 \u043a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u043a\u0438 Group-IB, \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u0432\u044b \u043d\u0435 \u043c\u043e\u0436\u0435\u0442\u0435 \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430 \u043d\u0430 Android \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u0430\u043c\u0438. \u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u043c\u044b \u0441 \u043a\u043e\u043b\u043b\u0435\u0433\u0430\u043c\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0430\u043b\u0438 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0438 \u043f\u0440\u0438\u0448\u043b\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74540,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-74539","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kriminalisticheskij-analiz-rezervnyh-kopij-hisuite\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 HiSuite | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kriminalisticheskij-analiz-rezervnyh-kopij-hisuite\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-03-18T05:42:40+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-03-18T05:42:40+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kriminalisztikai elemz\u00e9s a HiSuite biztons\u00e1gi ment\u00e9sekr\u0151l | ProHoster","description":"Adatok kinyer\u00e9se Android-eszk\u00f6z\u00f6kb\u0151l a.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kriminalisticheskij-analiz-rezervnyh-kopij-hisuite","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u043c\u0438\u043d\u0430\u043b\u0438\u0441\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 HiSuite | ProHoster","og:description":"\u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0441.","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/kriminalisticheskij-analiz-rezervnyh-kopij-hisuite","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-18T05:42:40+00:00","article:modified_time":"2020-03-18T05:42:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74539","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:12:25","updated":"2022-10-06 17:19:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/74539","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=74539"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/74539\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/74540"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=74539"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=74539"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=74539"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}