The amount and richness of data contained on mobile devices vary based upon the manufacturer and OS. Installed applications provide investigators with a rich repository of data that can be relevant to an investigation. However, a core set of data that mobile device forensic tools can recover remains constant across most mobile devices. Tools should have the ability to recover the following supported data artifacts stored in the device’s internal memory and UICC memory outlined in the Internal Memory Artifacts and UICC Memory Artifacts below.
Post your comment on this topic.