Mobile Forensic Minute

Starting a series on my conceptual talk at techno - The Forensic Kill Chain.  This episode is about the first part of the chain "Knowledge".  How important is training?  Most say very important, but do few attend training or attempt to obtain more than just a understanding of a tool.

This week we talk about Android Analysis from Chapter 13 of "Mobile Forensic Investigations", specifically dump files.  What information lives under the surface and what it may mean to your investigation.

Receiving calls about spyware, malware, or other nefarious apps?  Where would you look, how would you recover, or where to even start this type of analysis is often relegated to automation.  Lets enter the quiet room at the MFM lab and discuss!

Digging a little deeper can help dispell the magical powers of an automated tool.  In this episode we look to find out about phone numbers, ICCIDs, and more within the iOS file-system.

What happens when someone removes, hides, or eats their SD card from their Android device?  Is there still evidence of the contents that may be found?  Oh Android how you leave wonderful artifacts.

Not all extractions are created equal and exceptions are high with mobile device examiners.  Differences in extractions are covered in details within "Mobile Forensic Investigations" on Amazon, but the MFM starts it off!

Hidden gems in Browsers, 3rd party Apps, and anything web ready.  By using the Webkit platform developers can have an open source browser in minutes.  This is also a treasure trove for forensic examiners.

Mobile Forensic Minute is created to supplement the mobile forensic book "Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation"

Another MFM this week.  Always delicious, cookies are a webpage or app to keep track of settings, locations, dates, and more.  Do not forget to look at these little gems.

Another MFM this week.  Remembering 90% of the iceberg is underwater can help you relate to the thousands of files within a mobile device file-system that are un-touched by mobile forensic solutions.