you will need to develop an investigation plan that describes the current state of mobile incident response and investigation. With a forensic investigation focused on an iPhone, you plan to undertake a series of steps to develop the report for the Sheriff. Youll start with an investigation plan that describes the current state of mobile incident response and investigation. In this plan, you will discuss the types of mobile phone technologies, challenges presented, and investigative techniques.
The goal is to summarize the current state with mobile phone forensics, the guidelines for how examiners approach mobile phone evidence, the challenges posed by iPhones, limitations and constraints, and the expectations for forensic analysis of the iPhone.
Next, youll focus on analyzing a mobile phone image using Cellebrite Reader, a forensics tool that can be used to examine an image of a mobile phone.
As a preliminary step in the process, Sheriff Jamison asks you to write an investigation plan identifying how you, as the digital forensics investigator, can assist with the case by examining the missing girls iPhone for footprints, and by providing a description of the considerations and mobile investigative challenges associated with mobile forensics and mobile platforms, including third-party applications, security measures, communication interfaces, and sensors. As a reporting technique, this plan should include the following:
where mobile phone data may be extracted from
what types of mobile phone data might be present
how mobile phone data can be retrieved from an iPhone
how the data will be forensically preserved and analyzed
mobile phone applications that may hold useful information to this case
how the evidence will be handled in anticipation of court admissibility
Based on your experience and expertise, you know to include deep diving to locate deleted and locked data and timelines, as well as geographic information systems and bring your own device guidelines. As you prepare to scan for tools to use in this investigation, you will outline the need to look at the phone (SIM/USIM), and any additional memory (SD/memory cards), for call logs, text and SMS messages, contacts, graphics, web history, location information, Wi-Fi Connection logs, and application data.
The goal of this plan is to summarize current mobile phone forensics and mobile incident response and investigation, the guidelines for how examiners approach mobile phone evidence, the challenges posed by iPhones, limitations and constraints, and the expectations for forensic analysis of this device.
Construct an investigation plan that addresses the concerns listed above.
you will complete a comparative analysis report, focused on the evaluation of three companion tools to EnCase Mobile Investigator that could be used in the digital forensics investigation and analysis of a mobile phone.
In this report, you will identify three alternative mobile phone forensic tools for the analysis of mobile phones. In addition, you will:
assess similarities to Cellebrite Reader and one another
assess differences between Cellebrite Reader and one another
summarize the similarities and differences in all four tools
The outcome will be a comprehensive identification and review of four (including Cellebrite Reader) mobile phone forensic tools that Sheriff Jamison can use to select a tool for future investigations involving mobile phones. The structure of your analysis report should include the following:
Introduction (clearly state the purpose of your analysis)
Body
main idea statement
description of mobile phone forensic tools
evaluation of advantages and disadvantages of each tool
recommendation of a tool for future investigations
Conclusion
Appendices
References
Tables
Last Completed Projects
| topic title | academic level | Writer | delivered |
|---|