Warning

 

Close
Confirm Action

Are you sure you wish to do this?

Cancel Confirm
AR15.COM
2/9/2017 7:26:23 PM EDT
I have my kid's iPhone 5c... related to this thread http://www.ar15.com/forums/t_1_5/1963920_Urgent-Prayers-Needed---HUG-YOUR-CHILDREN.html

It is unlocked and I have access to all the apps, etc and have her passwords etc...

But I am looking for software that will recover stuff, from snapchat specifically.

Suggestions please?
2/9/2017 7:28:00 PM EDT
[#1]
I doubt you'll be able to recover content
2/9/2017 7:29:07 PM EDT
[#2]
Think if you don't screenshot it or not in a story it's gone.

I tried snapchat because my gf wanted to send me pics. It was too much trouble so I deleted it.

Others can probably tell you better than me but I don't think it's recoverable
2/9/2017 7:29:41 PM EDT
[#3]
the only thing you'll need, most likely, will be a warrant...

sorry
2/9/2017 7:30:55 PM EDT
[#4]
Have to looked on google for Snapchat recovery?

There seems to many recovery tools.


I hope you find something that works.
2/9/2017 7:31:31 PM EDT
[#5]
Good luck with your daughter
2/9/2017 7:32:43 PM EDT
[#6]
I think for any chance to recover from snapchat you're going to need some extremely high end, read .gov level, extraction software that will somehow tap into everything the camera has taken a photograph of.  Surely somewhere on the phone is a memory bank that shows what the camera has taken whether it is stored in the photo files or not.

A subpoena or warrant served to snapchat by local law enforcement might get some information/content if they save things to their servers....which I think they probably do.

In the end I seriously doubt you're going to find anything available to the civilian market that will recover much from snapchat, deleted files, etc.
2/9/2017 7:32:57 PM EDT
[#7]
Quote History
Quoted:
Think if you don't screenshot it or not in a story it's gone.

I tried snapchat because my gf wanted to send me pics. It was too much trouble so I deleted it.

Others can probably tell you better than me but I don't think it's recoverable
View Quote


They are gone.  That's the purpose of Snapchat.
2/9/2017 7:35:15 PM EDT
[#8]
You're SOL
2/9/2017 7:38:43 PM EDT
[#9]
I thought there was some controversy like 6 months ago about Snapchat not actually deleting stuff?

Also, didn't someone just release the tools that the Feds use for the older phones like that?
2/9/2017 7:49:45 PM EDT
[#10]
I have cellphone forensic software that costs $10k and another that's about 3k.  It will recover some snapchat, but not always.  Sometimes you get content and sometimes you just get that a message was sent, but not the content.  It's really hit or miss.  But you'd be surprised what stuff the software will find related to deleted SMS, pictures, and videos.  
2/9/2017 8:04:42 PM EDT
[#11]
I'd give this a try. I have t recovered data from phones but I've successfully used their software on PC's.

http://www.easeus.com/mobile-tool/free-iphone-data-recovery.html

Every app has a folder where it is installed and its temporary files must be stored within that folder. So you don't have to look everywhere, just within the app folder.
2/9/2017 8:12:48 PM EDT
[#12]
Snapchat stuff disappears.


Keep it up and running for a while. Let people keep sending stuff to see what's happening.



There may be a way to record it (not sure how) - otherwise, when you click on one of the sender's links, have another device ON to record it.


Now that you have the phone, if you want her to keep it, go into the appstore and lock it down after deleting everything you don't want her to have.
2/9/2017 8:20:53 PM EDT
[#13]
With iPhone 4 and older, you would have a chance.  Old iPhones give you physical access to the memory, so you could pull old/deleted snapchat message fragments.  iPhones 4S and newer only give you logical access to the memory due to how the hardware encryption works (design of the circuit board was entirely changed with 4S and newer).  That means you can only access what is "supposed" to be there.  Stuff that is deleted (example, old snapchat messages) basically becomes scrambled data so-to-speak.  On old iPhones and some Androids you can absolutely retrieve deleted snapchat messages though.

However, pretty much not possible on the iPhone 5C.

ETA: The poster below me, centex, stated you can pull deleted SMS messages (even on new iPhones).  This is true, because the table that the old SMS messages reside in is one single file, similar to one big excel spreadsheet, the messages are not individual files that are individually "deleted", the single SMS message entries are just marked as unused in the one big file and ready to accept new data (old data entries still present until overwritten).  Here's a quick article on how to retrieve the message database (sms.db) using iTunes backup https://www.hackthissite.org/articles/read/1133

Then just start going through it with an SQL viewer.  No snapchat stuff will be there, but you might find SMS/MMS messages related to what you are looking for.  I can't say what privacy rules might apply here.

Here is a good free SQL viewer if you need one (versions for Mac and PC) http://sqlitebrowser.org/
I'm sure you have it already, but here's iTunes download to get the backup made https://www.apple.com/itunes/download/
This should at least get you started.
2/9/2017 8:21:44 PM EDT
[#14]
It won't help with the Snapchat, but spotlight search will pull up deleted SMS  content if you know what keywords to put into it.
2/9/2017 9:12:45 PM EDT
[#15]
Quote History
Quoted:
I have cellphone forensic software that costs $10k and another that's about 3k.  It will recover some snapchat, but not always.  Sometimes you get content and sometimes you just get that a message was sent, but not the content.  It's really hit or miss.  But you'd be surprised what stuff the software will find related to deleted SMS, pictures, and videos.  
View Quote


I have used cellebrite before at work but I no longer have access... and yes it is an awesome tool and people are shocked at what can be pulled up even on some locked devices
2/9/2017 10:00:43 PM EDT
[#16]
Quote History
Quoted:
Snapchat stuff disappears.


Keep it up and running for a while. Let people keep sending stuff to see what's happening.



There may be a way to record it (not sure how) - otherwise, when you click on one of the sender's links, have another device ON to record it.


Now that you have the phone, if you want her to keep it, go into the appstore and lock it down after deleting everything you don't want her to have.
View Quote
I would do this no matter what recovery options you choose to use.    I would not engage, but just leave it charged, running, and check it regularly.  If someone is attempting to make her problems worse, they will probably try to contact her.