官术网_书友最值得收藏!

The mobile phone evidence extraction process

Evidence extraction and forensic examination of each mobile device may differ. However, following a consistent examination process will assist the forensic examiner to ensure that the evidence extracted from each phone is well-documented and that the results are repeatable and defendable. There is no well-established standard process for mobile forensics.

However, the following figure provides an overview of process considerations for the extraction of evidence from mobile devices. All methods used when extracting data from mobile devices should be tested, validated, and well-documented:

Mobile phone evidence extraction process
A great resource for handling and processing mobile devices can be found at:  http://digital-forensics.sans.org/media/mobile-device-fo rensic-process-v3.pdf.

As shown in the preceding figure, forensics on a mobile device includes several phases, from the evidence intake phase to the archiving phase. The following sections provide an overview of various considerations across all the phases.

主站蜘蛛池模板: 江西省| 泰来县| 柳河县| 镇赉县| 乡城县| 博野县| 遂川县| 玛多县| 吉安县| 榆林市| 兴和县| 淮阳县| 信丰县| 芷江| 沙洋县| 蒲江县| 浪卡子县| 孟津县| 东海县| 丹寨县| 雷州市| 同江市| 镇赉县| 凤庆县| 双辽市| 平乐县| 翼城县| 抚顺市| 巧家县| 长兴县| 澎湖县| 六盘水市| 聂拉木县| 江阴市| 万州区| 邵东县| 盐山县| 垫江县| 绥化市| 兴城市| 开封县|