So I want to show you quickly how you just
interact with this device.
So what I want to point out is we
can see here where it says adb shell pm
path for magnet acquire.
So if I go into my VM, the first thing I need to type--
and I'm going to zoom in here--
is adb devices.
And we can see it's attached.
So I will get in the habit of typing adb.exe,
just in case on your native system, it won't just take adb.
So we can do adb.exe.
And what I want to type is essentially shell pm--
I'm going to do list packages because that's
the first way we know which packages are listed there.
I'm going to zoom back in.
And here, we have a list.
These are all the packages on the device.
So this is where you would find Cellebrite
in app, Magnet Acquire app-- whatever it's calling it.
So this is how I found Magnet Acquire.
From there, what I did was say, OK, adb shell pm path
com.magnetforensics.acquire.
And what I want it to do with magnetforensics.acquire
is I want it to show me the path.
So it's saying, OK, this is your package,
data/app/com.mag netforensics.acq
uire-1/base.apk.
You will notice, from this point forward,
when apps install on the device, it gets a base.apk.
Copy that.
Copy everything after package.
Then, you are going to type adb pull,
and you're going to copy that.
Paste it right in there.
So everything you copied is now pasted.
And then we see, where do we want to save it?
C, Users, hmahalik, Desktop.
And it copies it out.
So the first thing we do is we say, OK, show us the path,
and then we copy that path, and then we export it.
So I'm going to do this example with something
different because I don't think I have Magnet Acquire on this
anymore.
But I want to make sure you understand what this is.
So as I look through here--
let me see if I can find Magnet Acquire.
I'm going to try anyway.
Let's see how it works.
comm magnet forensics acquire.
And I'm going to zoom in here in a second.
So adb shell pm path--
and this may fail because I don't know if it's on here.
Yeah, it's not there.
So I'm going to have to choose something that is there.
So I'm going to adb.exe shell pm path--
I'm going to choose that hidden menu one-- com.sec,
and it provides the path.
So then, what I'm going to do is I'm going to copy this.
And I may, sadly, get rejected because that's
in the system partition.
We're going to see what a rejection looks like.
So I'm going to just make sure this copied.
And I'm going to type adb pull.
I'm going to paste that.
And then where do I want to save it?
C-- let me zoom out, so I can see it, sorry.
I will zoom in as soon as I have this--
C, Users, FOR585, Desktop.
So again, I have adb pull, I pasted it in.
I think I'm going to get rejected because I'm not root.
I'm going to try it, save it to my desktop.
And it pulled it.
Excellent.
So it says it did pull this.
One apk pulled, done.
Now, in the next slide, it's going to show you
how I'd compiled this.
This is nothing that is crazy.
Here is our APK.
It has nothing to do with user data.
This is not user data.
This is you proving why you installed software
onto the device.
I just wanted to show you how easy it was to open that.
So what we did is we install Magnet Acquire.
We acquire our data.
And now, we need to defend ourselves
on when someone comes up against you and says,
Heather installed this software on my client's device
to put child exploitation on it.
And I say, no, I did not.
I put it on there to read your contacts, your call
logs, your browser history, your bookmarks, and things
like that.
And they say, prove it.
This is exactly what you can do.
You can then open that APK file.