How to extract Telegram correspondence from a phone in airplane mode?


Colleagues here had an interesting question about how to upload correspondence in a private Telegram chat from a smartphone seized by the police…

I answer with pleasure. Since the smartphone is almost certainly unlocked and in airplane mode, there are only two ways to safely retrieve correspondence from it.

1️⃣ Use of forensic software (UFED, MK, Avilla, etc.). Various files (documents, audio, video, photos) that were sent via Telegram can also be found manually on the device itself. They are located at storage/emulated/0/Android/data/org.telegram.messenger/files/Telegram

2️⃣ Alternative extraction. Smartphones running the Android and iOS operating systems do not allow you to backup correspondence. Finding the device offline allows us to retrieve the correspondence in the form of only:

🅰️ Screenshots. You can then recognize text in screenshots using:

https://image-to-text-ocr.netlify.app/
https://yandex.by/images/search
https://lens.google.com/search

🅱️ A text document created on a smartphone and containing copied texts.

In both cases, you can copy data to a PC via a data cable or AirDrop.

Igor S. Bederov

Comments

Post a Comment

Popular posts from this blog

Top of my free OSINT tools in 2023

Image
In this article, we will look at the tools that are used every day in my work related to the investigation of crimes. Last year was tough but interesting. Some developments stopped working in Russia. Many, on the contrary, were created in our country. Including with my participation. So let’s go! Datashare and Pinpoint Datashare Pinpoint Datashare and Pinpoint are for eDiscovery… The term is unfamiliar for Russia, so I’ll explain it. eDiscovery is the process of identifying, collecting, validating, and analyzing digital evidence. If it is quite simple — the electronic material of the investigation. Compare, 10 volumes of a criminal case or a link to a similar case that can be shared online with external users, and it also has the ability to end-to-end analytics and search through materials. In other words, a must have for the execution of investigations. Archivarius 3000 and DtSearch Archivarius 3000 DtSearch Archivarius 3000 and DtSearch are designed to work with arrays of textual
Read more

OSINT by nickname…

Image
OSINT by nickname is the process of collecting and analyzing information about a nickname on the Internet. Thanks to this collection method, we can build a chain of all mentions on the Internet, be it social networks or websites. WhatsMyName — a simple, fast and reliable service. Presented as an online service and open source software . Checks the presence of a nickname (strict compliance only) on 600 web resources. Also displays results from Google’s main search results and document searches. It does not provide additional types of search. Maigret is a more advanced service. Presented in the form of a Telegram bot and open source software . Checks the presence of a nickname (strict compliance only) on 3000 web resources. Allows you to upload an extended report on the inspection performed, including additional data on identified profiles. It does not provide additional types of search. mailcat is a service designed to search for the use of a nickname as part of an electronic address
Read more

Identification of web resource owners

Image
A WEBSITE (or simply a site) is a collection of web pages and related resources that are accessible via the Internet. Each web page within a site has a unique URL (Uniform Resource Locator) that allows users to easily find and access a specific page. Web pages are usually linked together by hyperlinks to enable navigation throughout the site. Websites can be static or dynamic. A static site consists of pre-built web pages that remain the same for all users. A dynamic website is built on templates and a database, which allows you to generate unique content and interact with users. WHO IS THE OWNER OF THE SITE? The site owner is the person or organization that owns the domain name and/or hosting. Depending on his status, he can be an individual or a legal entity. A website administrator is usually the name of the person or group of people responsible for managing and maintaining the site. It can perform tasks such as hosting management, installing and updating software, backing up data,
Read more