Hi, to all
I been watching Oxygen Forensic Suite 2 Demo and notice that before
examining the phone Oxygen Forensic Suite install on the phone OxyAgent,
symbian application.
On PC forensic training I`ll been teached that HDD must bee intact to be
valid as evidence and using image is the only way to do it.
Oxygen Connection Wizard said that"does not change personal data" but
I am wondering is that enough to stand on the court?
That probably depend from country to country but never the less I am
interesting with yours opinion…
zikmik,this is why the mobile forensics world is so different from the computer world,you will ALWAYS chage some data on a mobile phone where you image a hdd for instance this is impossible to do with a SIM card
its really about what data is changed and documenting when, why etc