6.4 Extraction Retrieval

Question 1

What are the different places where Level 2 Logical Extraction can be done?

Answer 1

SIM
Feature phone
Smartphone

Question 2

Describe what data can and can’t be retrieved from the different places of extraction

Answer 2

SIM
Live - live SIM data can be retrieved
Deleted - only can be retrieved using card reader

Feature phone
Live - can be retrieved
Deleted - can’t be retrieved

Smartphone
Live - can be retrieved
Deleted - some may be retrieved

Question 3

What type of data can be retrieved with Level 3 Physical Extraction?

Answer 3

Previous IMSI / ICCID details
Bluetooth pairings handset security codes
Predictive text dictionaries and welcome messages
Deleted handset data may be retrieved