It includes details like serial no, case no, locker no, investigator's name, time and date during each step, details of evidence transportation. Chain of Custody - Chain of custody is the document to maintain each record of the Digital evidence from the collection to presentation.Forensic Investigator can remove SIM card, Switch to Airplane mode or Use Faraday's Bag or Jammer There are several ways that could be followed according to the scenario.So, the first step should be to isolate the mobile device from the network. It is possible that attacker could remotely wipe data or any new activity could override the existing data.For mobile forensics below steps are good practice to follow If it is very important to maintain evidence integrity throughout the investigation. Preservation of evidence is a very crucial step in digital forensics. Search for the SIM package and if any cables are located around.If it is power on then, check the battery status, network status. It is good practice to take the picture using the camera of the location and mobile phone before starting any progress. Note location from where mobile has been collected.That is why it is necessary to document each and every small detail about steps taken starting from seizure, collection, preservation, analysis with the presentation in court.īelow steps are recommended to follow during collection of mobile device Preserving mobile device without altering data is nearly impossible because mobile device constantly transmits data using the network, Wi-Fi, or Bluetooth. Forensic sound manner should be used while collecting, preserving, and analyzing digital evidence to present it in court. One could extract data like SMS, contacts, installed applications, GPS data and emails, deleted data.Īs per the definition of the carrier in 2006, Digital Evidence is data that supports or refutes a hypothesis about digital events. With these challenges in mobile forensics, syncing mobiles phone to a computer using software becomes easy. Each case or investigation of the new model needs to consider differently and requires following steps which could be different and unique to the case. The ratio of new models designed and launched is very high which makes very difficult to follow similar procedures. Mobile phones generally belong to a single person so analysis of it could reveal lots of personal information.ĭue to the rapid growth, it also introduced challenges. Due to the exponential growth of the mobile market, Importance of mobile forensics has also increased. Mobile forensics is a field of digital forensics which is focused towards mobile devices which are growing very fast.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |