Difference between pages "SIM Card Forensics" and "File:ABCOpen.JPG"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
(Software)
 
 
Line 1: Line 1:
== Procedures ==
 
  
Acquire [[SIM Card]] and analyze the following:
 
 
* ICCID - Integrated Circuit Card Identification
 
* MSISDN - Subscriber phone number
 
* IMSI - International Mobile Subscriber Identity
 
* LND - Last Dialed numbers
 
* [[LOCI]] - Location Information
 
* LAI - Location Area Identifier
 
* ADN - Abbreviated Dialing Numbers (Contacts)
 
* FDN - Fixed Dialing Numbers (Provider entered Numbers)
 
* SMS - (Short Messages)
 
* SMSP - Text Message parameters
 
* SMSS - Text message status
 
* Phase - Phase ID
 
* SST - SIM Service table
 
* LP - Preferred languages variable
 
* SPN - Service Provider name
 
* EXT1 - Dialing Extension
 
* EXT2 - Dialing Extension
 
* GID1 - Groups
 
* GID2 - Groups
 
* CBMI - Preferred network messages
 
* PUCT - Calls per unit
 
* ACM - Accumulated Call Meter
 
* ACMmax - Call Limit
 
* HPLMNSP - HPLMN search period
 
* PLMNsel - PLMN selector
 
* FPLMN - Forbidden PLMNs
 
* CCP - Capability configuration parameter
 
* ACC - Access control class
 
* BCCH - Broadcast control channels
 
* Kc - Ciphering Key
 
 
 
== Hardware ==
 
 
=== Serial ===
 
 
* [[MicroDrive 120]] with SmartCard Adapter
 
 
=== USB ===
 
 
* [[ACR 38T]]
 
 
== Software ==
 
 
Wiki Links
 
* [[ForensicSIM]]
 
* [[Paraben SIM Card Seizure]]
 
* [[SIMIS]]
 
 
External Links
 
* [http://www.simcon.no/ SIMcon]
 
* [http://www.quantaq.com/usimdetective.htm USIM Detective]
 
* [http://www.data-recovery-mobile-phone.com/ Pro Data Doctor]
 
* [http://www.becker-partner.de/index.php?id=17 Forensic Card Reader (FCR) - German]
 
* [http://www.txsystems.com/sim-manager.html SIM Manager]
 
* [http://vidstrom.net/otools/simquery/ SIMQuery]
 
* [http://users.net.yu/~dejan/ SimScan]
 
* [http://www.nobbi.com/download.htm SIMSpy]
 
* [http://vidstrom.net/stools/undeletesms/ UnDeleteSMS]
 
 
== Recovering SIM Card Data ==
 
 
* [[Damaged SIM Card Data Recovery]]
 
 
== Security ==
 
 
SIM cards can have their data protected by a PIN, or Personal Identification Number.  If a user has enabled the PIN on their SIM card, the SIM will remain locked until the PIN is properly entered.  Some phones provide the option of using a second PIN, or PIN2, to further protect data.  If a user incorrectly enters their PIN number multiple times, the phone may request a PUK, or Personal Unblocking Key.  The number of times a PIN must be incorrectly entered before the phone requests the PUK will vary from phone to phone.  Once a phone requests a PUK, the SIM will remain locked until the PUK is correctly entered.  The PUK must be obtained from the SIM's network provider.  If a PUK is incorrectly entered 10 times the SIM will become permanently locked and the user must purchase a new SIM card in order to use the phone.  In some cases the phone will request a PUK2 before it permanently locks the SIM card.
 

Revision as of 23:36, 7 December 2008