Pieces0310
取证须让证物说话,莫妄以自我心证来给案情下定论.切忌画靶射箭,为找而找. 取证的根基仰赖经验与判断,在IT各领域的经验愈丰富,愈能看出端倪. 取证须善用工具,但不过度依赖工具.工具只能帮你缩小可能范围,但无法告诉你答案,仍需靠人进行分析判断.

导航

 

Since I mentioned about "Second Space", let's take a look at Samsung "Secure Folder". This built-in feature for Samsung smartphones is a secret space for storing images, videos, documents and apps. And most important of it, it's encrypted.

 

All you have to do is sign in with your Samsung cloud account and create a secure folder. You could decide the authenication method such as PIN, Password or Pattern Lock.

 

Suspects may make copies of Apps such as WhatsApp, WeChat, LINE...in "Secure Folder" for communicatoin with his/her parterns in crime. No ones knows what's inside the "Secure Folder". Even mobile forensic tools could extract all files from a Samsung smartphone, guess what? Those data in "Secure Folder" is meaningless because all data is encrypted. Only you could know is filename and its path, but you will never know its content.

 

It sounds like there is nothing you could do about decrypting Samsung "Secure Folder". Fortunately you could try to access the suspect's Samsung Cloud and you still got a chance to find backup data in "Secure Folder".

 

posted on 2020-06-02 23:26  Pieces0310  阅读(430)  评论(0编辑  收藏  举报