Palm through 6, Windows CE/Pocket PC/Mobile 4.x -
earlier, BlackBerry 4.x - earlier, Symbian 6.0 and
cell phones.Mobile device data acquisition
and analysis is an ever growing and improving field
of forensics. Unlike computer systems and hard
drives, mobile devices present new challenges for
the forensic detective. New devices which provide
increasing functionality, using many different
operating formats, are entering the consumer market
every day. The power of these mobile devices is
impressive, as they combine the ability to access
the Internet with the taking of photographs and
streaming video, audio communicatioins, text
messaging, making and retaining phone calls and
phone information, as well as instant messaging.
More and more persons are relying on these devices,
as an intricate part of their personal and business
lives, and they are storing everything, from
sensitive corporate data, to their personal banking
information, on them. Recovering this information in
a protected and secure environment is critical to
solving the case at hand and making reco vered
information/evidence presentable in court.
At Gifford and Associates, we are equipped with
the most modern and up to date software and
hardware for all forensic recovery applications. If
you determine that a mobile device may need to be
examined, make certain you contact us. You'll want
to provide us with as much information about the
device as you can, including: make, model, serial
number, user information, password, owner
information, computer interface software, etc.
Some devices can be fully acquisitioned, while
others can not. Some devices can be accessed without
a password and some can not. Some devices allow
protection for specific user defined data. Some
devices can lose data if the power (battery) is
allowed to drain completely. Some devices are in
what is referred to as an "always on" state, and
these need to be shielded from sending or receiving
data, even though they have been turned off. (placed
into a special container which prevents unwanted
signals from accessing your evidence).