Mobile Forensic
Mobile phone forensics is the science of recovering digital evidence from a mobile phone under forensically sound conditions using accepted methods. Cell phones vary in design and are continually undergoing change as existing technologies improve and new technologies are introduced. When a cell phone is encountered during an investigation, many questions arise: What should be done about maintaining power? How should the phone be handled? How should valuable or potentially relevant data contained on the device be examined? The key to answering these questions is an understanding of the hardware and software characteristics of cell phones.
This document, besides providing basic information on the acquisition, examination, analysis, and reporting of digital evidence on cell phones, focuses on the characteristics of cell phones, including smart phones having advanced capabilities and common circumstances that may be encountered by forensic experts, involving digital electronic data residing on cell phones and associated electronic media. The publication is not to be used as a step-by-step guide for executing a proper forensic investigation when dealing with mobile phones. Its purpose is to inform forensic practitioners about various technologies involved and potential ways to approach them from a forensic point of view.
- Mobile Phone Characteristics
- Identity Module Characteristics
- Device Identification
- Memory Considerations
- Memory Cards
- USB Memory Drives
- Extracting Deleted Data for Examination & Authentication