These days, virtually every major criminal activity leaves evidence — images, text messages, call records and more — on mobile devices. Yet for the investigator who knows only the basics or less about how to recover this evidence, building a strong case can be difficult — especially after the evidence has been deleted. State or regional digital forensics labs are frequently overworked and understaffed, while many agencies lack the resources for the training and equipment to support an in-house expert. A good compromise is to train non-expert forensic analysts or investigators to recover essential evidence. However, those who wish to take part in more complex mobile forensics need to know first that mobile forensics is as complicated as computer forensics — and has many of its own challenges…
