A few days ago, we have been investigating a JTAG memory dump from a device running Windows Phone 7. We discovered that a lot of developers of mobile forensic software do not support this operation system. They told us that Windows Phone 7 is an old operation system and there are not a lot of phones running this operation system. But our case included two phones running Windows Phone 7 by Nokia and HTC. So it is important to have software for investigating Windows Phone 7 artifacts. Gabriele Zambelli developed a python script for parsing WhatsApp’s databases from such devices. You can found the article entitled “WhatsApp chat parser for Windows Phone 7.8” and the python script here.
