Information Technology Reference
In-Depth Information
Mobile device forensic acquisition can be performed using multiple methods, which are
defined later. Each of these methods affects the amount of analysis required, which will be
discussed in greater detail in the upcoming chapters. Should one method fail, another must
be attempted. Multiple attempts and tools may be necessary in order to acquire the most
data from the mobile device.
Mobile phones are dynamic systems that present a lot of challenges to the examiner in ex-
tracting and analyzing digital evidence. The rapid increase in the number of different
kinds of mobile phones from different manufacturers makes it difficult to develop a single
process or tool to examine all types of devices. Mobile phones are continuously evolving
as existing technologies progress and new technologies are introduced. Furthermore, each
mobile is designed with a variety of embedded operating systems. Hence, special know-
ledge and skills are required from forensic experts to acquire and analyze the devices.
