Seeking the Truth from Mobile Evidence: Basic Fundamentals, Intermediate and Advanced Overview of Current Mobile Forensic Investigations will assist those who have never collected mobile evidence and augment the work of professionals who are not currently performing advanced destructive techniques. This book is intended for any professional that is interested in pursuing work that involves mobile forensics, and is designed around the outcomes of criminal investigations that involve mobile digital evidence. Author John Bair brings to life the techniques and concepts that can assist those in the private or corporate sector.
Mobile devices have always been very dynamic in nature. They have also become an integral part of our lives, and often times, a digital representation of where we are, who we communicate with and what we document around us. Because they constantly change features, allow user enabled security, and or encryption, those employed with extracting user data are often overwhelmed with the process. This book presents a complete guide to mobile device forensics, written in an easy to understand format.
1. Introduction - p. xxvii 2. Part 1. Basic, Fundamental Concepts - p. xxxi 3. Chapter 1. Defining Cell Phone Forensics and Standards - p. 3 4. Chapter 2. Evidence Contamination and Faraday Methods - p. 15 5. Chapter 3. The Legal Process—Part 1 - p. 29 6. Chapter 4. The Legal Process—Part 2 - p. 41 7. Chapter 5. The Cellular Network - p. 55 8. Chapter 6. Subscriber Identity Module - p. 71 9. Chapter 7. Device Identification - p. 87 10. Chapter 8. Triaging Mobile Evidence - p. 103 11. Chapter 9. The Logical Examination - p. 119 12. Chapter 10. Troubleshooting Logical Examinations - p. 141 13. Chapter 11. Manual Examinations - p. 155 14. Chapter 12. Report Writing - p. 167 15. Part 2. Intermediate Concepts - p. 183 16. Chapter 13. Physical Acquisitions - p. 187 17. Chapter 14. Physical Memory and Encoding - p. 201 18. Chapter 15. Date and Time Stamps - p. 215 19. Chapter 16. Manual Decoding MMS - p. 233 20. Chapter 17. Application Data - p. 247 21. Chapter 18. Advanced Validation - p. 267 22. Part 3. Advanced Concepts - p. 280 23. Chapter 19. Android User Enabled Security: Passwords and Gesture - p. 283 24. Chapter 20. Nondestructive Hardware and Software Solutions - p. 297 25. Chapter 21. Phone Disassembly and Water-Damaged Phones - p. 311 26. Chapter 22. JTAG (Joint Test Action Group) - p. 323 27. Chapter 23. JTAG Specialized Equipment - p. 335 28. Chapter 24. RIFF Box Overview - p. 347 29. Chapter 25. Z3X Box (Easy JTAG) Overview - p. 373 30. Chapter 26. Thermal Chip Removal - p. 389 31. Chapter 27. Nonthermal Chip Removal - p. 405 32. Chapter 28. BGA Cleaning - p. 417 33. Chapter 29. Creating an Image - p. 429 34. Chapter 30. eMMC Reading and In-System Programming - p. 457 35. Index - p. 479
Seeking the Truth from Mobile Evidence: Basic Fundamentals, Intermediate and Advanced Overview of Current Mobile Forensic Investigations will assist those who have never collected mobile evidence and augment the work of professionals who are not currently performing advanced destructive techniques. This book is intended for any professional that is interested in pursuing work that involves mobile forensics, and is designed around the outcomes of criminal investigations that involve mobile digital evidence. Author John Bair brings to life the techniques and concepts that can assist those in the private or corporate sector.
Mobile devices have always been very dynamic in nature. They have also become an integral part of our lives, and often times, a digital representation of where we are, who we communicate with and what we document around us. Because they constantly change features, allow user enabled security, and or encryption, those employed with extracting user data are often overwhelmed with the process. This book presents a complete guide to mobile device forensics, written in an easy to understand format.
1. Introduction - p. xxvii 2. Part 1. Basic, Fundamental Concepts - p. xxxi 3. Chapter 1. Defining Cell Phone Forensics and Standards - p. 3 4. Chapter 2. Evidence Contamination and Faraday Methods - p. 15 5. Chapter 3. The Legal Process—Part 1 - p. 29 6. Chapter 4. The Legal Process—Part 2 - p. 41 7. Chapter 5. The Cellular Network - p. 55 8. Chapter 6. Subscriber Identity Module - p. 71 9. Chapter 7. Device Identification - p. 87 10. Chapter 8. Triaging Mobile Evidence - p. 103 11. Chapter 9. The Logical Examination - p. 119 12. Chapter 10. Troubleshooting Logical Examinations - p. 141 13. Chapter 11. Manual Examinations - p. 155 14. Chapter 12. Report Writing - p. 167 15. Part 2. Intermediate Concepts - p. 183 16. Chapter 13. Physical Acquisitions - p. 187 17. Chapter 14. Physical Memory and Encoding - p. 201 18. Chapter 15. Date and Time Stamps - p. 215 19. Chapter 16. Manual Decoding MMS - p. 233 20. Chapter 17. Application Data - p. 247 21. Chapter 18. Advanced Validation - p. 267 22. Part 3. Advanced Concepts - p. 280 23. Chapter 19. Android User Enabled Security: Passwords and Gesture - p. 283 24. Chapter 20. Nondestructive Hardware and Software Solutions - p. 297 25. Chapter 21. Phone Disassembly and Water-Damaged Phones - p. 311 26. Chapter 22. JTAG (Joint Test Action Group) - p. 323 27. Chapter 23. JTAG Specialized Equipment - p. 335 28. Chapter 24. RIFF Box Overview - p. 347 29. Chapter 25. Z3X Box (Easy JTAG) Overview - p. 373 30. Chapter 26. Thermal Chip Removal - p. 389 31. Chapter 27. Nonthermal Chip Removal - p. 405 32. Chapter 28. BGA Cleaning - p. 417 33. Chapter 29. Creating an Image - p. 429 34. Chapter 30. eMMC Reading and In-System Programming - p. 457 35. Index - p. 479
