Smartphones have SQLite databases and PLIST files as the major sources of evidences. Location History− The location history data is a useful artifact which can be used by investigators to validate about the particular location of a person.Īpplications Installed − By accessing the kind of applications installed, investigator get some insight into the habits and thinking of the mobile user.Įvidence Sources and Processing in Python Messages − These are the useful artifacts which can reveal the state of mind of the owner and can even give some previous unknown information to the investigator. Some artifacts that can be extracted from mobile devices are as mentioned below − Thus, mobile devices can supply investigators with lots of insights about its user. Modern mobile devices possess lot of digital information in comparison with the older phones having only a call log or SMS messages. Artifacts Extractible from Mobile Devices In digital forensic industry, there is a lot of debate on the techniques used for non-standards devices, having transient evidences, such as smartphones. On the other hand, computer hardware, such as hard disk, is considered to be standard and developed as a stable discipline too. Though the use of smartphones is increasing in digital forensics day-by-day, still it is considered to be non-standard due to its heterogeneity. This branch is different from computer forensics because mobile devices have an inbuilt communication system which is useful for providing useful information related to location. Mobile device forensics is that branch of digital forensics which deals with the acquisition and analysis of mobile devices to recover digital evidences of investigative interest. This chapter will explain Python digital forensics on mobile devices and the concepts involved.
0 kommentar(er)
