Rubus – a free tool for digital investigators who need to reverse engineer BlackBerry data. Rubus deconstructs BlackBerry .ipd files into their constituent parts. This lets you see all the raw data inside.
Rubus allows investigators to reverse engineer raw BlackBerry data
BlackBerry phones create an .ipd file when the device is backed up. A number of forensic tools will parse contacts, SMS etc. from these files, but Rubus allows digital investigators to view all the data contained within .ipd files that standard forensic tools may not extract.
Why use Rubus?
This is best illustrated with an example.
The third-party SMS application "CrunchSMS" stores messages in its own format in a table within the .ipd file. These messages are not stored in the BlackBerry's SMS storage location. Rubus allows you to see this data.
Rubus gives analysts access to a wealth of raw data which could prove crucial in a case.
We have also open-sourced a free Python module (ccl_ipd) which can simplify the creation of parsing scripts for any data you may find using Rubus.
Download
Rubus is a free tool. Please click "download" to be taken to the download page.Please note that, as a free tool, support is limited and not guaranteed. If you have any queries, please email info@ccl-forensics.com and we will endeavour to answer questions, but it may not be possible to accommodate all requests received.
All trademarks acknowledged. CCL-Forensics is not affiliated with BlackBerry, any associated companies, or applications mentioned in relation to this product.