JTAG and Chip-Off Forensics

Cornerstone Discovery is proud to offer JTAG and Chip-Off forensics, an elite and advanced method of data extraction utilized by the FBI and offered by only a limited number of companies. These processes can only be performed by specially trained examiners who have the proper equipment.

JTAG and Chip-Off forensics may help retrieve and preserve data in the most difficult examinations after all other extraction options have been exhausted. Without these advanced forensic methods, examiners face grave challenges when devices are not supported by traditional forensic solutions, devices are locked or disabled, or devices have been involved in disastrous events. We are often able to recover data from devices submerged in a body of water, run over by a vehicle or caught in a burning building.

JTAG

The JTAG method is our first line of defense and involves disassembling the device and soldering wires to the device’s Test Access Ports.  These wires are then connected to a JTAG box which allows the examiner to obtain an image of the device’s memory. Once the image is obtained, the wires are de-soldered and the phone may be re-assembled and functional (if the device was functioning before the process started). The JTAG process is most frequently used when dealing with devices that are locked, have disabled USB ports and have moderate physical damage.

JTAG and Chip-Off forensics, an elite and advanced method of data extraction utilized by the FBI and offered by only a limited number of companies.

The Chip-Off method is an advanced solution used if JTAG has not been able to recover the data. The examiner utilizes special equipment to gently disassemble the device and locate the memory chip.  The examiner then cleans the chip and prepares it for the imaging process. The raw data is imaged from the chip using specialized programmers and adapters. The Chip-Off process is a final stage solution and will be destructive to the device.