官术网_书友最值得收藏!

  • Mobile Forensics Cookbook
  • Igor Mikhaylov
  • 226字
  • 2021-07-02 21:48:02

How to do it...

  1. Double-click on the program icon and connect the card reader with the SIM card. The program will open the Enter PIN information window as shown in the following screenshot:
  1. In this case, there is no need to enter the PIN code. Click on the OK button to start the data extraction process. The status of the extraction process will be shown in the Reading SIM... window:
  1. If the data is successfully extracted, you will be asked to fill in the Investigator:, Date / Time:, Case:, Evidence Number:, and Notes: fields in the Acquisition Notes window. After filling in the fields, click on the OK button:
  1. Unlike TULP2G and MOBILedit Forensic, SIMCon allows you not only to extract data and generate a report but also to view the extracted data. The following screenshot shows a fragment of the SIMCon window in which we can see SMS messages, including deleted ones, which were extracted from the SIM card:

The Acquisition Notes window

At the bottom of the SIMCon main window, there is a section that displays detailed information about the selected record:

A section of the SIMCon main window with the detailed information about the selected record

The SIMCon program allows viewing the contents of each file. The following screenshot shows the contents of the elementary file (EF_ICCID):

主站蜘蛛池模板: 义马市| 亳州市| 凤翔县| 昌图县| 调兵山市| 自治县| 雷山县| 泰顺县| 且末县| 志丹县| 盐亭县| 安徽省| 图木舒克市| 定襄县| 长兴县| 肇庆市| 微博| 卢氏县| 八宿县| 六安市| 监利县| 湘潭市| 宣汉县| 屏边| 江西省| 堆龙德庆县| 东明县| 新密市| 百色市| 邻水| 宝兴县| 清丰县| 金山区| 兴业县| 开原市| 乌兰察布市| 二连浩特市| 通辽市| 班戈县| 屏山县| 油尖旺区|