BlackBerry devices are still used by employees of major corporations due to the great security features. eDiscovery cases often require the examiner to be well versed in extracting and analyzing data from computers, servers, and smartphones such as BlackBerry devices. Commercial tools are available for the analysis of BlackBerry devices. The method of acquisition will determine the amount of analysis possible by the examiner. For example, a physical acquisition may have been obtained, but the forensic tool does not automatically parse the data in the image file. This requires the examiner to manually carve and reconstruct the data. BlackBerry devices are one of the most complicated smartphones to understand and consistently reconstruct by manual examination. The previous section provided some steps to successfully extracting data from BlackBerry devices. The acquisition steps should be followed to ensure that data is not missed. Multiple acquisitions may be required in...
Practical Mobile Forensics
Practical Mobile Forensics
Overview of this book
Table of Contents (20 chapters)
Practical Mobile Forensics
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Introduction to Mobile Forensics
Understanding the Internals of iOS Devices
Data Acquisition from iOS Devices
Data Acquisition from iOS Backups
iOS Data Analysis and Recovery
iOS Forensic Tools
Understanding Android
Android Forensic Setup and Pre Data Extraction Techniques
Android Data Extraction Techniques
Android Data Recovery Techniques
Android App Analysis and Overview of Forensic Tools
Windows Phone Forensics
BlackBerry Forensics
Index
Customer Reviews