
239
Chapter 15
Mobile Forensics
Scott R. Ellis and Josiah Roloff
CONTENTS
15.1 Introduction 240
15.2 Overview—Getting Started with Process and Procedure 245
15.2.1 Attribution 248
15.2.2 Preserving Digital Evidence in the Age of E- Discovery 250
15.2.3 What Denes a Mobile Phone? 253
15.2.4 Operating Systems 256
15.2.5 Memory Considerations 257
15.2.6 Subscriber Identity Module (SIM) Cards 257
15.2.7 What’s Stored on the SIM and What’s Not? 258
15.2.8 A Brief Word about Mobile Networks (and SIM Cards) 258
15.2.9 Soware Tools 259
15.2.10 NIST Tool Classication System 260
15.2.11 UICC (SIM Card) Tools 262
15.3 Protected Devices 263 ...