In Rusolut Platform 11, the eMMC NAND RECONSTRUCTOR includes several new features and improvements.
Modern devices use eMMC NAND with built-in controllers handling ECC and data management. When the controller fails, access to the translation layer is lost, and standard extraction methods do not work. In such cases, recovery requires direct NAND access and low-level data reconstruction.
To support this process, we have updated. The physical acquisition workflow has been optimized to increase automation and improve overall efficiency.
Picture 1 – ECC Map in the eMMC NAND RECONSTRUCTOR
One of the new features is the ECC map. This map shows the condition of the NAND chip. It allows the user to quickly understand the state of the memory and estimate the chances of successful data recovery. The map is more intuitive than before and helps to analyze how error correction and rereading perform.
Picture 2 – ECC Rereading
In the new interface, it is now possible to set the number of reread passes. Modern NAND chips often require five or more passes to reduce bit errors effectively. The user can choose to perform rereading/correction ECC separately for one ellement, or run processes on all elemnts.
Additionally, the interface now shows detailed parameters of the rereading process, making it easier to monitor how error pages are handled and corrected.
Picture 3 – ECC Logs
The ECC logs has been added. These log files allow users to review how the ECC process was performed. This is useful for analysis and troubleshooting.
Reconstructing data directly from NAND in eMMC cases is a complex task. It requires multiple transformations of the data structure.
Since data recovery can be very slow, a shadow copy mechanism is used in some cases to speed up the process.
Picture 4 – Complex Solution with Shadow Copy
The interface for this process has also been improved.
Picture 5 – Shadow Copy Process
Users can now view a map of the shadow copy process. This map is saved to a file, so when the case is reopened, the map is loaded automatically. This allows users to continue their work without starting from the beginning and speeds up the logical image reconstruction process.
The new version of Rusolut Platform 11 significantly improves the eMMC NAND reconstruction process. With a more intuitive interface, better visualization tools like the ECC map, advanced rereading options, and detailed ecc log, users have more control over chip reading process.
These updates not only simplify complex recovery tasks but also increase the chances of successful data extraction, especially in challenging forensic cases where the controller is no longer functional.