Mobile Forensics Beginner

I have written and released a tool that does allow the above which has been received very well. There is a demo available on my web site (www.sandersonforensics.com).

I would agree, this tool is very educational and useful to have.

paulo111 Its excellent for beginners and experts alike. If your just starting out on this journey its a might fine place to start.

I think my experience is the US is that no matter what tool/software package or combination of you have… you get evidence off of 50% of the phones with the big $$ tools and then BITPIM will get about the next 25%. The rest are left for the Manual Acquisition method.. !

I also wouldn't use the term FORENSICS and MOBILE in the same sentence.. as it really degrades the term FORENSIC. It's more like Technical Scavenging… 😉

I also wouldn't use the term FORENSICS and MOBILE in the same sentence.. as it really degrades the term FORENSIC. It's more like Technical Scavenging… 😉

Forensics in our field means 'pertaining to law'. If there is no method of examining a mobile phone without using the devices own GUI, the examiner must be qualified (either by experience or knowledge) to be able to say what changes his exam process has had on the device.
In my opinion this is not practical as the range of devices and their proprietary environment is such that a single analyst could never cover all the bases. This does not prevent a competent examiner from assisting a Court of Law to arrive at an understanding of the evidence based on its relevance and reliability (The Daubert Standard).
However, I would feel sympathy for any examiner who was cross examined by counsel to explain the changes that their examination had made to the device as I am sure that such a question would be impossible to answer.

Mobile phone forensics is a very difficult and often frustrating area of work and I have the utmost respect for those that do this job day after day.
I think it is time the mobile phone industry was encouraged to consider developing units dedicated to assisting forensic examiners and to realise they also have a moral and ethical obligation to their law abiding customers.

I also wouldn't use the term FORENSICS and MOBILE in the same sentence.. as it really degrades the term FORENSIC. It's more like Technical Scavenging… 😉

Can you name another forensic science that is 100% guaranteed?