CITATION

Reiber, Lee. Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation. New York: McGraw-Hill Education, 2015.

Mobile Forensic Investigations: A Guide to Evidence Collection, Analysis, and Presentation

Authors:

Published:  November 2015 Pages: 480

eISBN: 9780071843645 | ISBN: 9780071843638
  • Cover
  • Title Page
  • Copyright Page
  • Contents
  • Introduction
  • Chapter 1 Introduction to the World of Mobile Device Forensics
  • A Brief History of the Mobile Device
  • Mobile Device Data: The Relevance Today
  • The Overuse of the Word “Forensic”
  • Mobile Device Technology and Mobile Forensics
  • Examination Awareness and Progression
  • Data Storage Points
  • Educational Resources
  • Preparing for Your Journey
  • Chapter Summary
  • Chapter 2 Mobile Devices vs. Computer Devices in the World of Forensics
  • Computer Forensics Defined
  • Applying Forensic Processes and Procedures
  • Approach to Mobile Device Forensics
  • Standard Operating Procedure Document
  • Specialty Mobile Forensic Units
  • Forensic Software
  • Common Misconceptions
  • Chapter Summary
  • Chapter 3 Collecting Mobile Devices, USB Drives, and Storage Media at the Scene
  • Lawful Device Seizure
  • Fourth Amendment Rights
  • Securing the Scene
  • Examining the Scene for Evidence
  • Once You Find It, What's Next?
  • Data Collection: Where and When
  • Chapter Summary
  • Chapter 4 Preparing, Protecting, and Seizing Digital Device Evidence
  • Before Seizure: Understanding Mobile Device Communication
  • Understanding Mobile Device Security
  • Photographing the Evidence at the Scene
  • Tagging and Marking Evidence
  • Documentating the Evidence at the Scene
  • Dealing with Power Issues: The Device State
  • Bagging Sensitive Evidence
  • Transporting Mobile Device Evidence
  • Establishing Chain of Custody
  • Chapter Summary
  • Chapter 5 Toolbox Forensics: Multiple-Tool Approach
  • Choosing the Right Tools
  • Dealing with Challenges
  • Chapter Summary
  • Chapter 6 Mobile Forensic Tool Overview
  • Collection Types
  • Collection Pyramid
  • Traditional Tool Matrix
  • Tools Available
  • Chapter Summary
  • Chapter 7 Preparing the Environment for Your First Collection
  • Creating the Ideal System
  • Device Drivers and Multiple-Tool Environments
  • Chapter Summary
  • Chapter 8 Conducting a Collection of a Mobile Device: Considerations and Actions
  • Initial Considerations
  • Initial Documentation
  • Isolation of the Mobile Device
  • Mobile Device Processing Workflow
  • Chapter Summary
  • Chapter 9 Analyzing SIM Cards
  • Smart Card Overview: SIM and UICC
  • Chapter Summary
  • Chapter 10 Analyzing Feature Phone, BlackBerry, and Windows Phone Data
  • Avoiding Tool Hashing Inconsistencies
  • Iceberg Theory
  • Feature Phones
  • BlackBerry Devices
  • Windows Phone
  • Chapter Summary
  • Chapter 11 Advanced iOS Analysis
  • The iOS File System
  • iOS “Tip of the Iceberg Data”
  • File System Structure
  • iOS Evidentiary File Types
  • Chapter Summary
  • Chapter 12 Querying SQLite and Taming the Forensic Snake
  • Querying of the SQLite Database
  • Analysis with Python
  • Chapter Summary
  • Chapter 13 Advanced Android Analysis
  • Android Device Information
  • Predominate Android File Types
  • Artifacts
  • “Tip of the Iceberg Data”
  • File Interrogation
  • Android App Files and Malware
  • Chapter Summary
  • Chapter 14 Presenting the Data as a Mobile Forensics Expert
  • Presenting the Data
  • Becoming a Mobile Forensic Device Expert
  • Chapter Summary
  • Index