By: Navid Sobbi
In part 1 (link to part 1) we explained how it is possible to recover deleted Messenger messages from your phone using a proper digital forensic extraction process. This is done by reconstructing the Messenger database which contains all your messages be they:
In this article, we will explain what happens when:
Using data recovery software can be harmful as the software needs to be saved onto a computer to be installed to the phone or installed directly on the phone itself (read this article re The Dangers of using data recovery software).
The process of installing the data recovery software to the phone can actually overwrite crucial areas within the phone’s memory. In most instances, the data recovery software will require you to update your phone’s operating system to ensure compatibility with their software.
This part of the process has the potential to do the most harm as it:
This non-forensic process, unfortunately, overwrites an extensive amount of deleted data from your phone’s memory with new data. This non-forensic process also wipes all app databases, and all apps must then be reinstalled.
If your Messenger app has been deleted, the area in which the database was created is wiped and reconstructing it is difficult. Also, if the phone is still in use, the chances of data being overwritten increase. If you reinstall the app, this then creates a new database which will not have the original data within it.
At NSI, we can perform a forensic process known as Social and Cloud Forensic Extraction. This allows our digital forensic examiners to access the database that is held at the app manufacturer’s servers.
We can then:
At NSI, we have true Digital Forensic Data Recovery tools to enable every possible extraction method and we will exhaust every possible avenue in order to recover deleted Messenger messages. Contact us today and let us retrieve your deleted Messenger messages.