O'Reilly logo

Hiding Behind the Keyboard by John Bair, Brett Shavers

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Chapter 3

Triaging Mobile Evidence

Abstract

This chapter briefly covers important aspects of mobile forensics for those investigators who have little to no experience, or have dealt only with computer forensics. It explains both mobile network operators and virtual network operators and how to determine your target number. It also discusses typical evidential areas located within the SIM file system and how to triage both powered “on” and “off” mobile evidence. The chapter concludes with explaining some of the manual tools and utilities that can be used for mobile forensic exams.

Keywords

Cell phone evidence; Faraday; Logical exams; Manual exams; MNO; Mobile data extraction; Mobile extraction steps; MVNO; SIM artifacts
 
In defining a logical and physical ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required