Hello all,
I received a question today from legal regarding the "TouchCopy" software.
The defense used this SW to pull the SMS off of an iPhone (not sure what generation/iOS version), but the prosecution seems to think that there is "missing" messages. I know that this could be from the user deleting messages, the SW not pulling all the messages off the phone or the defense submitting a report with only what they wanted in it.
Legal asked me if this was considered forensic software. I have never heard of it being used in any case and that it appears to be 3rd party SW that anyone can purchase and use.
So my question is, has anyone ever used with on evidence or know of anyone who has? And if you have, was it acceptable in court?
Thank you,
- JT
Not heard of the software before JT.
I checked the website but I didn't see a statement (maybe I missed it) that referred to TouchCopy retrieving SMS text messages from a (U)SIM Card? Could that be a reason why text messages may be missing from the iPhone data acquisition?
Regarding being considered forensic software, if the examiner can justify its use, would it not be for the other side to demonstrate why the product fails its stated acquisition capability?
As a supplementary observation to the above. If an examiner had simply used a (U)SIM reader and acquired text messages stored on a (U)SIM would it be asked why has the (U)SIM tool not acquired text messages stored on a handset when it is not within the functional capability of the (U)SIM tool?
Thanks for the reply.
I am only going off what our legal department told/asked me since I don't actually have the evidence (yet). Also, they couldn't even tell me the model of the phone so I could test the tool with our phone.
As for the SMS being stored on the (U)SIM, I understand te possibility of SMS being stored on it, but they didn't reference anything about it.
As for the tool being argued to not being "forensic"? Our lab goes off of everything being tested and evaluated to ensure the tool actually works the way it says it works, which it I would think it does.
Also, they (legal) are wondering about the deleted SMS and what they can bring to the table. That is one main reason of hem sending me the phone to process.
I was basically posting in hopes of getting some input other than mine to tell legal is all.
Thanks again