ATTENTION: The new home of the Digital Forensics Wiki is at https://forensicswiki.xyz/. Yeah, it's a silly name, but it was cheap.
This wiki will be going offline permanently in the near future. An exact date will be announced soon. Thank you for being a part of this community.
If you wish to work on the new forensicswiki, please join the Google Group forensicswiki-reborn
The RIM BlackBerry is a personal wireless handheld device that supports e-mail, mobile phone capabilities, text messaging, web browsing, and other wireless information services. It is most commonly utilized for business purposes.
The BlackBerry OS provides easy access to applications such as e-mail, to do list, memos, address book, and many other features. With the newer operating systems 4.1 and later, composing messages are much more convenient by providing auto text.
- 7100 Series
- 7700 Series
- 7700 Series
- 8700 Series
Forensics on the RIM platform is complicated by the fact that this is a "push" device --- the RIM server will push device to the PDA whenever the PDA's radio is on and there is data available.
RIM devices also feature a remote self-destruct feature. This feature cannot be activated if the radio is turned off, of course.
Both of these features mean that you need to be sure that the radio is off when doing a forensic investigation.