mobile forensic praticle

plzz help me
regarding my topic

mandeep - at which University are you studying?

There is a quantity of helpful material regarding extraction and harvesting of deleted data on Forensic Focus that can help you with ideas for your dissertation.

As for free software tools (which do not automatically equate to 'forensic tools') a simple search on Google should assist you. However, hardware isn't free; you will have to pay for your SIM readers, handset cables or other probes and plugs. I am loosely referring to hardware because your question is wide ranging, analogous to someone going into a Library and asking the Librarian that you want to read a book and then expecting the Librarian to guide you from there.

Maybe look at extracting iPhones with iTunes (free) to recover backup files.

I have not used it but for $35 you might be able to use this to convert the backup files to their proper 'non-itunes' state.
http//www.icopybot.com/itunes-backup-manager.htm

From here you can recover quite a bit of deleted data if you know where to look and understand the file structures.

This link may help you with recovering deleted data from the SQLite files http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=7139

And again…
http//www.forensicfocus.com/index.php?name=Forums&file=viewtopic&t=7197

thanks .
thanks very much trewmte ad doug for your help.

im studying university of east london.
im in new in this field and i havn't gud ideas about mobile forensic ,but i want to do something very gud for my dissetation.
for that i need to do work very hard.

doug if im going to extracting iphone with itunes to recover a backup files that ll be very simple.
i donot have any knowledge to recover a deleted data in Sqlite files.
can u suggest me ,,what should i do.

thanks very much…i really appeicate for your help
once again thanks

Look at the second Forensic Focus link I posted. It contains a post made by AlexC that contains links to a presentation given that covers the structure of SQLite files which should give you a much better understanding of how to attack them and what to look for.

Unless you want to take the easy route and buy a top license for Oxygen Forensic Suite where you can process iTunes backup files then use their inbuilt facilities for deleted data in SQLite files. Might be out of reach on a student budget though! Maybe you can get your uni to buy it.

Its worth checking out iPhone Analyzer (free on Sourceforge). It will also read the itunes backup data. Not as well as a paid for app but its a good freeby. Also SQLite Browser (also Sourceforge) for browsing through the sql files and exporting the content.

http//sourceforge.net/projects/iphoneanalyzer/
http//sourceforge.net/projects/sqlitebrowser/

hi
im doing my disertation in computer n network forensic,,but i want to a practicle in mobile forensic,,
lik how can i retrive a hidden or deleted data in contacts,text meggage etc.
but i want to know how i download the mobile forensic tools..???
can any body help to find out the free tools which are help ful in my project???
i ll be very appericate for your help.
thanks

Try to download the free trial version of Oxygen Forensic Suite. It will allow you to view deleted records in all iPhone SQLite databases - contacts, calendar, messages. notes etc.

But please keep in mind that trial version works for 30 days/starts only.

Thanks Doug ,alex101 and oxygen_software i really appericate for ur helps.
Oxygen_software i try to find the deleted sms and contacts over thr but it shows me the entire present message and call history..
but it didn't show me the deleted contacts and sms .
so could u plz explain for me can i find the deleted records or not and how???
can i also recory the passcode because on every ihone have passcode, so how can i break it..
once again thanks very much for helps..
thanks

Have you checked to see if the database has 'Auto Vac' enabled?

I suggest reading up on how SQLite databases work to understand what you are dealing with.