Information Technology Reference
In-Depth Information
The archiving phase
Preserving the data extracted from the mobile phone is an important part of the overall pro-
cess. It is also important that the data is retained in a useable format for the ongoing court
process, for future reference, should the current evidence file become corrupt, and for re-
cord keeping requirements. Court cases may continue for many years before the final judg-
ment is arrived at, and most jurisdictions require that data be retained for long periods of
time for the purposes of appeals. As the field and methods advance, new methods for
pulling data out of a raw, physical image may surface, and then the examiner can revisit the
data by pulling a copy from the archives.
