Difference between revisions of "Cell Phone Forensics"

From ForensicsWiki
Jump to: navigation, search
m (Begin the process.)
(Phone charger)
Line 2: Line 2:
  
 
# If on, leave on. If off, leave off.
 
# If on, leave on. If off, leave off.
# Collect and preserve other surrounding and related devices.
+
# Collect and preserve other surrounding and related devices. Be especially careful to collect the power charger. The phone's battery will only last a certain amount of time. When it dies, much of the data on the device may go too!
 +
# Plug the phone in, preferably in the evidence room, as soon as possible.
 
# Retain [[search warrant]] (if necessary - [[LE]]).
 
# Retain [[search warrant]] (if necessary - [[LE]]).
 
# Return device to forensic lab if able.
 
# Return device to forensic lab if able.

Revision as of 08:31, 20 May 2006

Guidelines

  1. If on, leave on. If off, leave off.
  2. Collect and preserve other surrounding and related devices. Be especially careful to collect the power charger. The phone's battery will only last a certain amount of time. When it dies, much of the data on the device may go too!
  3. Plug the phone in, preferably in the evidence room, as soon as possible.
  4. Retain search warrant (if necessary - LE).
  5. Return device to forensic lab if able.
  6. Use forensically sound tools for processing.

Notes

Expand on 5 as to what to collect:

Process:

  1. Research the Cell Phone. Visit PhoneScoop.com for more information