Although fairly nascent and possessing a small market share in the world of PDA operating systems, Linux is quickly becoming a viable alternative to both Palm OS and Microsoft's Windows Mobile. Companies are quickly adopting Linux because of its open source nature and potential for cost savings.
The wide variety of useful Linux utilities exist for desktop computers can also be used on Linux-based PDAs. These utilities can often be used as a part of the forensics investigation process.
dd, or duplicate disk, is a Unix and Linux utility that allows the user to create a bitstream image of a disk or device. Once the Linux-based PDA is connected to another device and the dd utility is run, the mirror image can be uploaded onto memory cards or even an external desktop workstation connected via a network. Images created by dd are readable by forensics software tools such as EnCase and Forensic Toolkit. Since the device uses a Linux filesystem, the image may also be mounted and examined on a Linux workstation.