WhatsApp Evidence Recovery From Samsung

My Samsung A30 was compromised and a vital WhatsApp thread—evidence I need—was erased. The Google Drive backup appears to have been wiped as well, so we have to work from the device itself. I have not run any recovery utilities, resets, or new installs since the breach, and I can unlock the phone, enable USB debugging, and supply account credentials. I also know the exact period in which the messages were sent and deleted, which should help you zero-in on the right database entries.

The objective is clear: retrieve the deleted conversation and package it in a form suitable for legal use, whether that is the decrypted msgstore.db, an export of the chat, or a concise forensic report. I am open to whatever toolset you prefer—Cellebrite, Oxygen Forensic, ADB-level imaging with SQLlite parsing, or another proven method—provided the approach preserves admissibility.

When you reply, please outline:

• the workflow you would follow from imaging to decryption;
• precautions I should observe right now to avoid overwriting deleted records;
• the estimated turnaround time for analysis and delivery of the recovered chat.

Phase two can extend to my iPhone if traces remain there, but the Samsung takes precedence.

I am ready to cooperate fully—remote guidance, shipping the handset, or on-site hand-over—to get this conversation back as quickly and safely as possible.