Examining Cell Phones

Guide to Forensic Examinations of Cell Phones

Forensic exams of a cell phone is just what you would think if you watched the TV show CSI. It is using a cell phone as a source of information in a crime or other legal concern. This kind of work is not about fingerprints or physical evidence, though; it is about the electronic evidence a phone can provide. What calls were made, to where or whom, how long did they last, what texts were sent? Answering these questions can provide law enforcement with clues or answers to questions in just about any crime.

The more ubiquitous cell phones become, the more forensic investigation of cell phones is an important field of study and work. The more people have their cell phones with them, the more people use them, the more personal information people put into a cell phone. The more complex cell phones become, the more information can be stored in a cell phone.

And cell phone forensics is not just for law enforcement, corporations are beginning to pay attention as cell phones with massive amounts of memory and cameras become normal, the chances for important company information to be taken increases. And of course there are identity theft issues. So, the more organizations and people that are interested in what people have on their cell phones and how to see it, the more people are concerned about their personal privacy. This means even individuals will be interested in cell phone forensics to know what a cell phone can tell someone else. Even parents and kids are likely to be interested in cell phone forensics. Parents concerned by their child’s behavior can learn more about what influences their offspring; the children will want to know what their cell phone can tell their parents.

There are many software and hardware tools for cell phone forensics:

  • MOBILedit!Forensic is software that downloads all information from a cell phone and automatically creates a forensic report on the contents.
  • The software eIntaforensics-ART–Mobile is a way to collect images from a cell phone.
  • Other forensics software include BitPIM and The .XRY/XACT System Bundle. Forensics hardware like Cellebrite, EnCase® Neutrino®, AccessData – MPE, DataPilot SecureView, and Paraben’s Device Seizure Toolbox are tools that allow data from cell phones to be almost instantly downloaded and filed for quick review, rather than turning the cell phone over to a technology department for three days before finding out what is on the phone.

There is a constant duel between phone privacy and phone forensics. Police want to know what is on a suspect’s phone, but an employee does not want his company to know what is on his phone. The lead line of defense on a cell phone is the password. Software like Rainbowcrack can provide what is called a brute force method to getting a cell phone password. This method is done by entering every possible combination into a phone. This takes time and computing power, but it can be effective. To defend against this, some phones now have password-entry limits. After ten tries all the data is wiped from the memory. Police, or other determined groups, can then move on to memory recovery software. This software can recover wiped memory, deleted texts, and phone numbers.

Cell Phone Forensic Software and Hardware

  • List of cell phone forensic tools
  • Cell phone forensic tool from Paraben
  • Discussion of several cell phone forensic tools
  • Science daily discussion on cell phone forensic tools
  • Cell phone forensic tool from Susteen

Do-It-Yourself Cell Phone Forensics Procedures

Data Recovery Tools

Cell Phone Forensics Services

Computer Forensic Education

Computer Forensics Employment

Inside a Cell Phone

  • The inside of a cell phone
  • What is inside a cell phone

Cell Phone Operating Systems