-: Mobile Forensic Toolkits.
So, in addition to everything we have
in our forensic toolkit,
we also have to consider
what do we do if we come across
a mobile device like a cellphone or a tablet.
Now some tablets like Windows tablets
will be treated just like a PC.
But if you're getting across
something like and iOS device
like an iPad or an Android device,
they're gonna be treated more like a cellphone.
And so, when you deal with cellphones and mobile toolkits,
you have to remember that they have different
operating systems and different security issues
that you're gonna come across.
Capturing the data from a mobile device
can be much more difficult
and does require specialized tools.
And so, you might have this additional toolkit
called your mobile toolkit
to handle those issues.
Now one of the issues you're gonna have
if you're dealing with a cellphone, specifically,
is getting access to the SIM card.
Now in the old days,
it used to be pretty easy.
You'd take off the battery pack
and under there would be your SIM card.
Well, nowadays it's a little bit more difficult.
If you've ever taken a SIM card out of an iPhone,
you have to have a push pin-style tool
to be able to push that little tray out
as you can see here on the screen,
and most of the Android devices
are doing something similar.
So you'll need either small screwdrivers
or a push pin to get access to that SIM card.
Now why would you want that SIM card?
Well, your SIM card holds a lot of information on it
including your address books, your contacts,
and even call histories,
so having that information
as a forensic investigator
could be useful
depending on what the victim of the crime was dealing with
and what the perpetrator was doing.
Now the next thing you wanna look at is connection cables.
Just like we had in our regular toolkit
where we're worried about SATA, and IDE, and USB,
well, phones and tablets have their own connectors.
If you're dealing with an Apple device,
luckily there's only two connectors you need to worry about,
the old 30-pin style, as you can see on the right,
and the lightning cable as shown in the top left.
But if you're dealing with Android,
there's a myriad of cables,
some of them use USB-C,
some of them use USB Mini,
some of them use USB Micro.
And in the old days,
if you're dealing with the old cellphones,
they all had their own proprietary cables
that were all different.
So, what do we do as digital forensic investigators?
Well, there's a kit you can buy
that's called the connection cable kit.
And it's got literally 50 or 100
different types of cables
that pretty much connect to
any kind of phone on the market.
So, if you're working as a law enforcement agency,
you're probably already gonna have
one of these inside your mobile toolkit.
Then next one you need to deal with
is specialized software for mobile forensics.
And this specialized software will help you
get things off there like
the library of photos,
the notes,
their contact chaining,
as you can see here on the bottom
we have this kind of image of,
I called you and you called the next guy,
all of this information comes off of the phone
in a specialized way.
And standard forensic software
doesn't get you that information.
So you will have to look for specialized
mobile forensic software
and there's a couple of big players
in that industry that you'll run across,
as well as EnCase and FTK
as some of the bigger brands, like Access Data,
that can sell you some of that software.
Again, there's not a whole lot of opensource stuff
for mobile forensics right now.
Most of it is commercialized product.