Mobile forensic entails the identification, preservation, documentation as well as extraction and analysis of mobile data through well-defined procedures. The forensics mobile toolkits are often used to facilitate the work users, allowing one to perform a number of structured activities such as storing data, making calls, receiving calls, transferring data among others.
Access Data FTK Imager is classified as Joint Test Action Group. It often used in extracting data from a hard drive. MacLockPick 3.0, - is classified as level 2 (logical extraction) whereby a communication is established between the phone and a computer through an interface such as USB. Device Seizure is manual extraction this is a forensic toolkit that allows forensic users to acquire, retrieve, examine and report data linked to the mobile phones in operation over TDMA, GSM as well l as CDMA Networks (Neuner et al., 2016).
Delegate your assignment to our experts and they will do the rest.
DataPilot is a level 3 toolkit (Hex Dumping). DataPilot is software that allows cell phone users to transfer contact data to and from any given PC. It also enables one to transfer information from cell phone memory to PDA through a computer. BitPim on the other hand is classified at level 1 (micro read) whereby the user browses through the phone using the keypad such as viewing call list, calendars among others. This is a mobile phone management program meant to run Windows, Mac OS, allowing the user to view and manipulate their stored data such as wallpapers, ringtones, and calendars as well as embedded file system (Jansen et al., 2007).
Secure View 3-is classified at level 5(micro read) whereby bits of information are read manually and translated into binary digits. This is a software device used in investigation to the stored information in any cellphone. It allows one to report or export on all the information stored in the phones including the deleted content. Cellebrite UFED Forensic System is classified at level 2(logical extraction). It is often used in extracting and examine forensically related evidence from a wide range of cell phones and applications swiftly and accurately (Neuner et al., 2016).
Micro Systemation XRY is classified at level 2 (Logical extraction). It is used to analyze as well as recover information from phones by connecting to a PC and software. MOBILedit-is at level 2 (logical level). This forensic toolkit application often allows examiners to acquire logically some data through searching examining and reporting of data. The data can be retrieved from GSM/CDMA/PCS mobile phone devices. It often connected to the mobile phone devices through an infrared port, a cable interface, or even a Bluetooth link.
SIMcon is at level 4 (chip off). SIMcon Z540.3 tends to work with any standard a smart sim-card reader that complies with the PC/SC standards. It gives the one an opportunity to create customized reports by identifying file information that relates to the investigation (Jansen et al., 2007).
References
Jansen, W. A., Ayers, R., & National Institute of Standards and Technology (U.S.). (2007). Guidelines on cell phone forensics: Recommendations of the National Institute of Standards and Technology . Gaithersburg, MD: U.S. Dept. of Commerce,
Neuner, S., Schmiedecker, M., & Weippl, E. (October 01, 2016). Effectiveness of file-based deduplication in digital forensics. Security and Communication Networks, 9, 15, 2876-2885.
