The amount and richness of data contained on mobile devices vary based upon the manufacturer and OS. Installed applications provide investigators with a rich repository of data that can be relevant to an investigation. However, a core set of data that mobile device forensic tools can recover remains constant across most mobile devices. Tools should have the ability to recover the following supported data artifacts stored in the device’s internal memory and UICC memory outlined in the Internal Memory Artifacts and UICC Memory Artifacts below.


Was this helpful?

Yes No
You indicated this topic was not helpful to you ...
Could you please leave a comment telling us why? Thank you!
Thanks for your feedback.

Post your comment on this topic.

Post Comment