±Forensic Focus Partners

±Your Account


Nickname
Password


Forgotten password/username?


Membership:
New Today: 5
New Yesterday: 5
Overall: 27325
Visitors: 79

±Follow Forensic Focus

Join our LinkedIn group

Subscribe to news

Subscribe to forums

Subscribe to blog

Subscribe to tweets

Most comprehensive mobile forensic tool?

Discussion of forensic issues related to all types of mobile phones and underlying technologies (GSM, GPRS, UMTS/3G, HSDPA, LTE, Bluetooth etc.)
Subforums: Mobile Telephone Case Law
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
Go to page 1, 2  Next 
  

Most comprehensive mobile forensic tool?

Post Posted: Tue Jun 03, 2014 3:19 pm

If you were to obtain training on mobile forensics, what would you pick? I am looking for the most comprehensive tool as well as the best overall training. I understand the value of vendor neutral training, I am currently a CFCE. The best vendor neutral training I find is the SANS training, however that runs a hefty 5K.

Suggestions, from the front lines much appreciated.  

redalert
Newbie
 
 
  

Re: Most comprehensive mobile forensic tool?

Post Posted: Tue Jun 03, 2014 11:38 pm

What other courses have you turned up in your search? Which country are you in? How far would you be willing to travel for training? I'm not from the front lines whatsoever, but answering these questions may help get a more tailored answer in regards to your situation.  

forveux
Member
 
 
  

Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 8:26 am

Very fair. Sorry newbie status.

I am in the US. Willing to travel anywhere domestically for the training. Currently I have highlighted Parabin, AccessData, Oxygen as the three top contenders but that is only due to popularity of the tools which may or may not be reflective of their popularity inside the courtroom.  

redalert
Newbie
 
 
  

Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 1:46 pm

As your in the US, take a look at Teel Technologies. They have been highly recommended in the past!  

DCS1094
Senior Member
 
 
  

Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 2:44 pm

Most comprehensive tool Cellebrite/XRY very close contenders, both have pros and cons, different levels of skills needed to get into both.

Training wise in the UK I cannot recommend Kevin Mansel of Control F forensics enough to give a newbie a good baseline of knowledge as well as his expert series.

All the best in your upcoming career. If you dig deep enough and do your research you will do very well.

Youtube is defiantly your friend for dis assembly guides  

mobileforensicswales
Senior Member
 
 
  

Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 7:28 pm

For mobile forensics the clear stand out tools are Cellebrite UFED and Microsystemation XRY, if you want vendor specific training IMO you would be wasting your time with anyone other than one of those two.

You are fortunate being in the US as by comparison to us poor Australians you have fantastic access to training.  

Adam10541
Senior Member
 
 
  

Re: Most comprehensive mobile forensic tool?

Post Posted: Wed Jun 04, 2014 11:47 pm

Funnily enough a similar question appeared on LinkedIn about becoming a mobile phone examiner and at this early stage it is pretty much agreed that vendor training offers the solution to certify the person is capable to use their tool correctly, but does not certify the person is a mobile phone examiner.

Alternatively, training courses that impart (and the person gains) experience proves far more valuable in order to know which tools (note the plural) to buy.

I am more of an advocate of the second option because I train others and have learned first-hand the concepts people have when first coming into a training course and become aware of their concepts changing quite significantly after they finish the course. However, I have equally performed vendor training even though I am not the manufacturer of the products. The vendor training was undertaken for two reasons. In the late 1990s early 2000s there were few tools around and the names/tools around today weren't there. Moreover, the examiners energy was spent on discovery and made the examiner learn the science, product and usage, skills of handling and examination following which it released value to the examiner to understand what is evidence and where it might reside. Later I changed to a more advanced tool because it helped me further demonstrate about how to find evidence and the tools open platform approach allowed for upgrade as new technology came along. Thus keeping open the door of opportunity to enhance my examination skills and look for a diagnosis and identify potential lines for prognosis.

It is very important when dealing with tools to understand (a) which tools allows you to inform yourself in order to translate the meaning of the evidence and (b) which tools tell you what it means by simply translating the answers for you. Both paths will bring you an education one way or another.
_________________
Institute for Digital Forensics (IDF) - LinkedIn
Mobile Telephone Examination Board (MTEB) - LinkedIn
Mobile Telephone Evidence & Forensics trewmte.blogspot.com
ForensicMobex now MTEB Linkedin Subgroup 

trewmte
Senior Member
 
 
Reply to topicReply to topic

Share this forum topic to encourage more replies



Page 1 of 2
Go to page 1, 2  Next