Chapter 4

Mobile Extraction Issues

Abstract

This chapter explains the various problems that mobile forensic examiners can expect to encounter. To provide clarity to the issues, the chapter will explain NAND, NOR, embedded multimedia card, embedded multichip package, and multichip package memory configurations. The NAND spare area, along with NAND blocks, wear leveling, and garbage collection will also be addressed. Data encoding and decoding and examples of various artifacts from physical acquisition processing. This will include Joint Test Action Group and Advanced Chip Off binary pulls. The chapter also covers various Epoch issues on mobile devices and concludes with ways in which user enabled security can be defeated or bypassed.

Keywords

7-bit ...

Get Hiding Behind the Keyboard now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.