Difference between pages "Phone with SIM Card" and "Cell Phone Forensics"

From Forensics Wiki
(Difference between pages)
Jump to: navigation, search
 
(Phone charger)
 
Line 1: Line 1:
Perform forensics on the cell phone before removing the SIM Card.
+
== Guidelines ==
 +
 
 +
# If on, leave on. If off, leave off.
 +
# Collect and preserve other surrounding and related devices. Be especially careful to collect the power charger. The phone's battery will only last a certain amount of time. When it dies, much of the data on the device may go too!
 +
# Plug the phone in, preferably in the evidence room, as soon as possible.
 +
# Retain [[search warrant]] (if necessary - [[LE]]).
 +
# Return device to forensic lab if able.
 +
# Use [[forensically sound]] tools for processing.
 +
 
 +
== Notes ==
 +
 
 +
Expand on 5 as to what to collect:
 +
 
 +
* [[ESN]],
 +
* [[IMEI]],
 +
* [[Carrier]],
 +
* Model Number,
 +
* Color, and
 +
* Other information related to [[Cell Phone]] and [[SIM Card]].
 +
 
 +
Process:
 +
 
 +
# Research the [[Cell Phone]]. Visit PhoneScoop.com for more information
 +
#
 +
#
 +
#

Revision as of 08:31, 20 May 2006

Guidelines

  1. If on, leave on. If off, leave off.
  2. Collect and preserve other surrounding and related devices. Be especially careful to collect the power charger. The phone's battery will only last a certain amount of time. When it dies, much of the data on the device may go too!
  3. Plug the phone in, preferably in the evidence room, as soon as possible.
  4. Retain search warrant (if necessary - LE).
  5. Return device to forensic lab if able.
  6. Use forensically sound tools for processing.

Notes

Expand on 5 as to what to collect:

Process:

  1. Research the Cell Phone. Visit PhoneScoop.com for more information