官术网_书友最值得收藏!

The mobile phone evidence extraction process

Evidence extraction and forensic examination of each mobile device may differ. However, following a consistent examination process will assist the forensic examiner to ensure that the evidence extracted from each phone is well-documented and that the results are repeatable and defendable. There is no well-established standard process for mobile forensics.

However, the following figure provides an overview of process considerations for the extraction of evidence from mobile devices. All methods used when extracting data from mobile devices should be tested, validated, and well-documented:

Mobile phone evidence extraction process
A great resource for handling and processing mobile devices can be found at:  http://digital-forensics.sans.org/media/mobile-device-fo rensic-process-v3.pdf.

As shown in the preceding figure, forensics on a mobile device includes several phases, from the evidence intake phase to the archiving phase. The following sections provide an overview of various considerations across all the phases.

主站蜘蛛池模板: 洪雅县| 平原县| 福贡县| 阳城县| 延安市| 安丘市| 高尔夫| 新巴尔虎左旗| 郧西县| 华蓥市| 蒲江县| 瑞丽市| 杨浦区| 四子王旗| 腾冲县| 宣化县| 平度市| 江华| 定西市| 武城县| 涿州市| 万荣县| 昭觉县| 青浦区| 清水河县| 武山县| 元朗区| 晋中市| 舒城县| 习水县| 松原市| 班玛县| 正定县| 新绛县| 哈尔滨市| 乌拉特中旗| 翼城县| 沙雅县| 闸北区| 丁青县| 江阴市|