Mobile Forensics is the extraction and analysis of data from mobile devices, including cell phones, for use in a variety of investigations. Information that can be retrieved, depending on the operating system and manufacturer, includes photographs, call logs, internet search history, location, and more. The development of modern smartphones has increased the amount of personal information available for data extractions. With thousands of cellular device models in the world, the professionals at DJS utilize the proper equipment, training, and data for forensic analyses.

 

Forensic Cell Phone Downloads

Apple (iPhone) Android Feature Phones Foreign Phones

 

Acquisition Methods Utilizing Forensic Software:

• Logical – Obtains files and folders from mobile devices, excluding deleted data.
• File System – More in-depth inquiry into a mobile device’s memory, looking at system databases and third-party application data, as well as write-ahead logs (WAL) that may contain deleted data, temporary files, money transactions, notifications, and more.
• Physical – Bypasses the phone’s operating system, capturing all the data bit-for-bit from a phone’s internal flash memory. This method collects hidden data and remnants of deleted data stored in unallocated space. Deleted items such as text messages, call logs, pictures, and videos may be recovered.

Apple cell phones (iPhones) use the iOS operating system. Unlike Android phones, only Apple manufactures iPhones, which allows Apple to implement the same privacy and storage rules across all devices. Acquisition methods and potential data for iPhones are as follows:

 

Acquisition Method	Availability	Data Types
Logical	All unlocked iPhones	Call logs Voicemails Text messages Pictures Videos Browsing history GPS locations Notes Health and battery data
File System	iPhone Models with iOS 12 and up (iPhone 6 – Present)	All data from Logical Acquisition System and log files Passwords Application data Third-party map locations KnowledgeC database file
Physical	iPhone Models Manufactured from 2007-2010 (iPhone 4 and earlier)	All data from Logical and File System Acquisition Potential deleted data including call logs, voicemails, text messages, pictures, videos, browsing history, GPS locations, notes, and more.

 

We Have An Apple Mobile Forensics Expert Who Can Help With Your Case.
Complete the Form Below to Get Started.

[contact-form-7 id=”2307″ title=”GPS Technology Expert Request”]

 

Android cell phones use an open-source operating system. Unlike Apple phones, Android phones are produced by dozens of manufacturers. Each manufacturer, in production, can modify security protocols, data parameters, and other informational storage features that can affect the method or ability of performing a forensic data extraction. Acquisition methods and potential data for Android phones are as follows:

 

Acquisition Method	Availability	Data Types
Logical	Unlocked Android phones	Call logs Voicemails Text messages Pictures Videos Browsing history GPS locations Notes Only for devices prior to Android 7.0, application data is available
File System	Unlocked and locked Android phones	For unlocked Android phones, includes all data from Logical Acquisition as well as: System and log files Passwords Application data Third-party map locations Device events (power on/off, application opened/closed) For locked (password protected) Android phones, partial File System Acquisition may be available to recover some data listed above
Physical	Can be completed for unlocked Android phones, with the potential to complete for locked devices *Password bypass methods available for locked devices	All data from Logical and File System Acquisition Selective application extraction Potential deleted data including call logs, voicemails, text messages, pictures, videos, browsing history, GPS locations, notes, and more.

 

We Have An Android Mobile Forensics Expert Who Can Help With Your Case.
Complete the Form Below to Get Started.

[contact-form-7 id=”2307″ title=”GPS Technology Expert Request”]

 

Feature Phones:

• Feature phones are wireless mobile devices that are limited in capabilities when compared to smartphones but have more features than the original standard cell phones used solely for making phone calls.
• These devices typically feature calling, messaging, mild application availability, as well as basic multimedia and internet browsing capabilities.

 

Available Datatypes for Feature Phones

• Contacts
• Call logs
• Text messages
• Pictures
• Videos
• Application data

 

Acquisition Methods

• Logical and Physical acquisitions may be available for the feature device.
• When a feature phone is not supported for acquisition, an expert can manually examine data from the phone, documenting key data per forensic cell phone acquisition protocol.

 

Other

• Windows Phones
• In comparison to other cell phone manufacturers, Microsoft’s windows phones have a small set of users. Microsoft will reportedly be abandoning their cell phone platform by the end of 2021.

 

We Have A Mobile Forensics Expert Who Can Help With Your Case.
Complete the Form Below to Get Started.

[contact-form-7 id=”2307″ title=”GPS Technology Expert Request”]