Practical Mobile Forensics - Fourth Edition

Reporting

Reporting is the process of preparing a detailed summary of all the steps taken and conclusions reached as part of an examination. Reporting should include details about all the important actions performed by you, the results of the acquisition, and any inferences drawn from the results. Most of the forensic tools come with built-in reporting features that will autogenerate the reports while providing scope for customization at the same time. In general, a report may contain the following details:

• Details of the reporting agency
• Case identifier
• Forensic investigator
• Identity of the submitter
• Date of evidence receipt
• Details of the device seized for examination including serial number, make, and model
• Details of the equipment and ...