Mobile forensics pr...
 
Notifications
Clear all

Mobile forensics protocol  

  RSS
giandega
(@giandega)
Active Member

Dear collegue,

I am updating the procedures.

I know that if a smartphone is on to turn it off y removing the battery.

But if it is a phone with no removable battery? Which is the correct procedure?

Quote
Posted : 21/10/2020 2:10 pm
Deltron
(@deltron)
Active Member

In 2020 with FDE and FBE I would ask why would you want to turn the device off? This is a very old practice that will hurt you on new Android and iPhone device. If you have a iphone in AFU and you turn it off you just lost alot of data you potentialy had.

ReplyQuote
Posted : 21/10/2020 5:39 pm
Styers liked
giandega
(@giandega)
Active Member

but what should do LE in a situation of seizure of a Phone?

ReplyQuote
Posted : 21/10/2020 6:21 pm
armresl
(@armresl)
Community Legend
Posted by: @giandega

but what should do LE in a situation of seizure of a Phone?

Airplane mode, then keep it powered up until you find out what specifically you need to do with it.

No shortage of cables or outlets in examiner's offices/labs.

 

ReplyQuote
Posted : 27/10/2020 9:07 pm
giandega
(@giandega)
Active Member

ok many thanks

ReplyQuote
Posted : 28/10/2020 7:20 am
giuseppem
(@giuseppem)
New Member

In your knowledge, can Cellebrite UFED handle an iPhone in AFU state? Of course, it can perform a "BFU extraction".

ReplyQuote
Posted : 15/11/2020 10:59 am
Styers
(@styers)
New Member

I advise my Deputies to keep powered on, Place in airplane mode or remove SIM card.

I have a set of lockers outside my office that they can place the device in and run a charger cord through a hole to keep the device charged until they get a search warrant for the device. I also keep a Faraday bag or two handy.

ReplyQuote
Posted : 20/11/2020 3:42 pm
giandega
(@giandega)
Active Member

OK many thanks Styers

ReplyQuote
Posted : 21/11/2020 11:29 am
trewmte
(@trewmte)
Community Legend
Posted by: @styers

I advise my Deputies to keep powered ...... or remove SIM card.

And if the SIM Card requires the battery to be removed to gain access to it, how are you keeping phone powered?

ReplyQuote
Posted : 21/11/2020 11:35 am
Share: