Cell Phone Forensic Services & Digital Forensics Investigators
Roughly 48% of the world population owns a smartphone, with the U.S. ranking third at 79% of the country’s population. Those mobile devices account for roughly 55% of all internet traffic and are used for activities that generate and store massive amounts of personal data.
In fact, over the last five years, as smartphones and mobile devices have evolved into powerful tools with applications that store a wide range of data, mobile devices have also become key sources of evidence in criminal investigations. But because mobile devices and the programs that run on them also include extremely complex forms of encryption, that evidence isn’t easily accessible by investigators. In response to the needs of law enforcement, the information security community has developed several methods that fall under a new category of forensics–Mobile Device Forensics.
What Are Mobile Forensics?
A branch of digital forensics, mobile forensics is focused on recovering forensically sound digital evidence from mobile devices. The challenge in this field is that digital data is so easily manipulated or corrupted, that tools and methods must focus on extracting evidence and securing it in such a way that it remains unmodified from its original state. Mobile Forensics is typically a 4-step process:
- Our mobile forensics investigators identify and preserve the device(s) in question. Using documentation to track and maintain chain of custody, devices are secured so that they cannot be used in any way and maintain the existing data state.
- Next, a copy of the data is extracted in a forensically sound state from the device using imaging software so that the copy is what our investigators are manipulating rather than the original data. Certain methods are used to ensure the copied data matches the original.
- During the Examination phase, the full image of data captured from the device, including deleted or hidden data, is examined by our experts to extract all relevant evidence.
- Our reports break down the methods used, what was recovered, and includes the chain of custody documentation to prove the integrity of the findings.
What Tools Do We Use for Mobile Forensics?
Our team has multiple certifications in Mobile Device Forensics, including Cellebrite Certified Mobile Examiner (CCME) and Paraben Certified Smartphone Examiner (PCSE). This gives our team access to two of the most powerful mobile forensic tool suites.
Cellebrite UFED 4PC
The Cellebrite UFED software is one of the most well-respected tools in the industry, capable of extracting a complete and forensically sound copy from target mobile devices.
Paraben Electronic Evidence Examiner
Once the data has been extracted from the device, the Paraben software suite allows our team to fully manipulate and acquire forensic evidence from the extracted files.
The Types of Evidence We Can Extract from Mobile Devices
Extractions of mobile devices can yield a copious amount of data. However, every device and operating system is different, and some devices can provide more intel than others. In addition to retrieving text messages and call history, we also have the ability to extract specific data about the calls and texts. The tools we have at our disposal also allow us to pull certain application data stored on the device. Other information we can extract includes*:
- MMS Messages
- Browser History
- Notes and Contacts
- GPS Location History
- Calendar Events
- Images and Videos
- Chats from third party applications
- Application data
* We can also pull any deleted content that has not been overwritten in device’s memory.
The Carolina’s Premier Provider of Mobile and Digital Forensics Services
Let us answer all your questions about mobile forensics in person at our Charlotte office, over the phone, or by email. Want us to contact you? Leave your information below and we’ll reach out for a discreet, confidential consultation.