This specification defines requirements, test assertions, and test cases for extracting and reporting evidence of probative value from mobile devices, including smartphones, tablets, Universal Integrated Circuit Cards (UICCs), and feature phones. Mobile devices contain a wealth of information potentially relevant to an investigation.
This document defines mobile forensic data acquisition tool requirements. The requirements are used to derive test assertions, statements of conditions checked after a test case is run. Each test assertion is covered by one or more test cases consisting of a test protocol and the expected test results. The test case protocol specifies detailed procedures for setting up the test, executing the test, and measuring the test results. Comments and feedback are welcome. This document, and future revisions, are available for download at: https://www.cftt.nist.gov/mobile_devices.htm.