Mobile Forensics

Mobile Forensics is the extraction and analysis of data from mobile devices, including cell phones, for use in a variety of investigations. Information that can be retrieved, depending on the operating system and manufacturer, includes photographs, call logs, internet search history, location, and more. The development of modern smartphones has increased the amount of personal information available for data extractions. With thousands of cellular device models in the world, the professionals at DJS utilize the proper equipment, training, and data for forensic analyses.

 

Forensic Cell Phone Downloads

 

Acquisition Methods Utilizing Forensic Software:

  • Logical – Obtains files and folders from mobile devices, excluding deleted data.
  • File System – More in-depth inquiry into a mobile device’s memory, looking at system databases and third-party application data, as well as write-ahead logs (WAL) that may contain deleted data, temporary files, money transactions, notifications, and more.
  • Physical – Bypasses the phone’s operating system, capturing all the data bit-for-bit from a phone’s internal flash memory. This method collects hidden data and remnants of deleted data stored in unallocated space. Deleted items such as text messages, call logs, pictures, and videos may be recovered.

 

Apple Cell Phones

 

Apple cell phones (iPhones) use the iOS operating system. Unlike Android phones, only Apple manufactures iPhones, which allows Apple to implement the same privacy and storage rules across all devices. Acquisition methods and potential data for iPhones are as follows:

 

Acquisition Method Availability Data Types
Logical All unlocked iPhones
  • Call logs
  • Voicemails
  • Text messages
  • Pictures
  • Videos
  • Browsing history
  • GPS locations
  • Notes
  • Health and battery data
File System iPhone Models with iOS 12 and up
(iPhone 6 – Present)
  • All data from Logical Acquisition
  • System and log files
  • Passwords
  • Application data
  • Third-party map locations
  • KnowledgeC database file
Physical iPhone Models Manufactured from
2007-2010 (iPhone 4 and earlier)
  • All data from Logical and File System Acquisition
  • Potential deleted data including call logs, voicemails, text messages, pictures, videos, browsing history, GPS locations, notes, and more.

 

We Have An Apple Mobile Forensics Expert Who Can Help With Your Case.
Complete the Form Below to Get Started.

[contact-form-7 id=”2307″ title=”GPS Technology Expert Request”]

 

 

Android Cell Phones

 

Android cell phones use an open-source operating system. Unlike Apple phones, Android phones are produced by dozens of manufacturers. Each manufacturer, in production, can modify security protocols, data parameters, and other informational storage features that can affect the method or ability of performing a forensic data extraction. Acquisition methods and potential data for Android phones are as follows:

 

Acquisition Method Availability Data Types
Logical Unlocked Android phones
  • Call logs
  • Voicemails
  • Text messages
  • Pictures
  • Videos
  • Browsing history
  • GPS locations
  • Notes
  • Only for devices prior to Android 7.0, application data is available
File System Unlocked and locked Android phones

For unlocked Android phones, includes all data from Logical Acquisition as well as:

  • System and log files
  • Passwords
  • Application data
  • Third-party map locations
  • Device events (power on/off, application opened/closed)

For locked (password protected) Android phones, partial File System Acquisition may be available to recover some data listed above

Physical Can be completed for unlocked Android phones, with the potential to complete for locked devices
*Password bypass methods available for locked devices
  • All data from Logical and File System Acquisition
  • Selective application extraction
  • Potential deleted data including call logs, voicemails, text messages, pictures, videos, browsing history, GPS locations, notes, and more.

 

We Have An Android Mobile Forensics Expert Who Can Help With Your Case.
Complete the Form Below to Get Started.

[contact-form-7 id=”2307″ title=”GPS Technology Expert Request”]

 

 

Featured Phones & Other

 

Feature Phones:

  • Feature phones are wireless mobile devices that are limited in capabilities when compared to smartphones but have more features than the original standard cell phones used solely for making phone calls.
  • These devices typically feature calling, messaging, mild application availability, as well as basic multimedia and internet browsing capabilities.

 

Available Datatypes for Feature Phones

  • Contacts
  • Call logs
  • Text messages
  • Pictures
  • Videos
  • Application data

 

Acquisition Methods

  • Logical and Physical acquisitions may be available for the feature device.
  • When a feature phone is not supported for acquisition, an expert can manually examine data from the phone, documenting key data per forensic cell phone acquisition protocol.

 

Other

  • Windows Phones
  • In comparison to other cell phone manufacturers, Microsoft’s windows phones have a small set of users. Microsoft will reportedly be abandoning their cell phone platform by the end of 2021.

 

We Have A Mobile Forensics Expert Who Can Help With Your Case.
Complete the Form Below to Get Started.

[contact-form-7 id=”2307″ title=”GPS Technology Expert Request”]

 

Do you have a question for us? We’re here to help!