官术网_书友最值得收藏!

The mobile phone evidence extraction process

Evidence extraction and forensic examination of each mobile device may differ. However, following a consistent examination process will assist the forensic examiner to ensure that the evidence extracted from each phone is well-documented and that the results are repeatable and defendable. There is no well-established standard process for mobile forensics.

However, the following figure provides an overview of process considerations for the extraction of evidence from mobile devices. All methods used when extracting data from mobile devices should be tested, validated, and well-documented:

Mobile phone evidence extraction process
A great resource for handling and processing mobile devices can be found at:  http://digital-forensics.sans.org/media/mobile-device-fo rensic-process-v3.pdf.

As shown in the preceding figure, forensics on a mobile device includes several phases, from the evidence intake phase to the archiving phase. The following sections provide an overview of various considerations across all the phases.

主站蜘蛛池模板: 闽清县| 阳高县| 陈巴尔虎旗| 岳池县| 公主岭市| 马尔康县| 百色市| 阜城县| 林周县| 二手房| 甘南县| 丽水市| 万荣县| 白银市| 屏山县| 潢川县| 常熟市| 安图县| 边坝县| 虞城县| 九江县| 武宣县| 太保市| 西乌珠穆沁旗| 佳木斯市| 新乐市| 莱阳市| 中方县| 永顺县| 常德市| 安多县| 秀山| 永安市| 兴城市| 河曲县| 剑阁县| 衡南县| 新泰市| 天水市| 青田县| 安仁县|