Summary

Modern mobile devices store a wide range of information, such as SMS, call logs, browser history, chat messages, location details, and so on. Hence they are often a key factor in several criminal cases, reconstruction of events, corporate and legal cases, and more. Mobile device forensics also comes with its own challenges and concepts that fall outside the boundaries of traditional digital forensics. Extreme care should be taken while handling the device, right from the evidence intake phase to the archiving phase. Examiners responsible for mobile devices must understand the different acquisition methods and the complexities of handling data during analysis. Extracting data from a mobile device is half the battle. The operating system, security features, and type of smartphone will determine the amount of access you have to the data. It is important to follow sound forensic practices and make sure that the evidence is unaltered during the investigation.

The next chapter will provide an insight into iOS forensics. You will learn about the filesystem layout, security features, and the way files are stored on an iOS device.