Information Technology Reference
In-Depth Information
Mobile phone evidence extraction process
Evidence extraction and forensic examination of each mobile device may differ. However,
following a consistent examination process will assist the forensic examiner to ensure that
the evidence extracted from each phone is well documented and that the results are repeat-
able and defendable. There is no well-established standard process for mobile forensics.
However, the following figure provides an overview of process considerations for extrac-
tion of evidence from mobile devices. All methods used when extracting data from mobile
devices should be tested, validated, and well documented.
A great resource for handling and processing mobile devices can be found at
http://digital-
Mobile phone evidence extraction process
