Book Image

Mobile Forensics Cookbook

By : Igor Mikhaylov
Book Image

Mobile Forensics Cookbook

By: Igor Mikhaylov

Overview of this book

Considering the emerging use of mobile phones, there is a growing need for mobile forensics. Mobile forensics focuses specifically on performing forensic examinations of mobile devices, which involves extracting, recovering and analyzing data for the purposes of information security, criminal and civil investigations, and internal investigations. Mobile Forensics Cookbook starts by explaining SIM cards acquisition and analysis using modern forensics tools. You will discover the different software solutions that enable digital forensic examiners to quickly and easily acquire forensic images. You will also learn about forensics analysis and acquisition on Android, iOS, Windows Mobile, and BlackBerry devices. Next, you will understand the importance of cloud computing in the world of mobile forensics and understand different techniques available to extract data from the cloud. Going through the fundamentals of SQLite and Plists Forensics, you will learn how to extract forensic artifacts from these sources with appropriate tools. By the end of this book, you will be well versed with the advanced mobile forensics techniques that will help you perform the complete forensic acquisition and analysis of user data stored in different devices.
Table of Contents (18 chapters)
Title Page
Credits
About the Author
About the Reviewer
www.PacktPub.com
Customer Feedback
Preface

Windows Phone acquisition with UFED 4PC


Cellebrite company products, such as UFED 4PC, UFED Touch, and UFED Physical Analyzer, are among the best in the field of mobile forensics. In this recipe, the process of data extraction from a Windows Phone device using UFED 4PC will be shown.

Getting ready

A trial license for UFED 4 PC can be obtained by request from Cellebrite distributors. In response to the request, you will receive an email with links to the distributions.

  1. Download UFED 4 PC.
  2. Double-click the setup file icon.
  3. Install UFED 4 PC following the instructions. After installation, click on the UFED 4 PC icon.

After starting, the program will show a window that indicates that the program is not activated:

UFED 4 PC window offering to select the type of license

  1. Click Software. In the new window, the computer ID, which has to be sent to the distributors, will be displayed:

UFED 4 PC window with the computer ID

  1. In response to the message with the computer ID, you will receive a message that will...