In AXIOM Process, click Evidence sources > Cloud > Acquire evidence.On the Process menu, click Add new evidence to case.In AXIOM Examine, in the Artifacts explorer, browse to Mobile > Android WhatsApp User Information.To acquire and decrypt a WhatsApp backup: Phone number associated with the account.Google credentials (user name and password) and multi-factor authentication details if required.If the WhatsApp data is missing from the quick image, attempt to acquire a full image.īefore you begin: To acquire and decrypt a user's WhatsApp backups from the cloud, you'll require the following information: In some cases, the decryption key might not be available if you acquired a quick image of the Android device. Acquire and decrypt a WhatsApp backup using a recovered decryption keyĪfter you acquire an Android image, you can attempt to recover the user's WhatsApp decryption key and use the key to decrypt their WhatsApp cloud backups.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |