Get A Critical Review Of 7 Years Of Mobile Device Forensics - Computer ... - Cs Stevens

Unreliable or invalid forensic discipline. ... Insufficient validation of a method. ... Misleading testimony. ... Like everyone, forensic practitioners can make mistakes, including mixing up samples or contaminating specimens.

Generally, the process can be broken down into three main categories: seizure, acquisition, and examination/analysis. Other aspects of the computer forensic process, such as intake, validation, documentation/reporting, and archiving still apply.

As with any evidence gathering, not following the proper procedure during the examination can result in loss or damage of evidence or render it inadmissible in court. The mobile forensics process is broken into three main categories: seizure, acquisition, and examination/analysis.

Mobile forensics is the process of recovering digital evidence from mobile devices using accepted methods. Unlike traditional digital forensics processes, mobile forensics solely focuses on retrieving information from mobile devices such as smartphones, androids, and tablets.

Other challenges unique to mobile forensics: Accidental wiping or resetting of data (or intentional wiping or resetting by a suspect, even from a remote location) Variations in hardware and software platforms and devices that investigators must understand and navigate.

There are two major risks concerning this phase of the mobile forensic process: Lock activation (by user/suspect/inadvertent third party) and Network / Cellular connection.

The biggest challenge in mobile forensics is keeping up with the rapid pace of change in mobile technology. New devices and operating systems are constantly being released, each with its unique file system and data storage methods.

Technical Challenges The two challenges faced in a digital forensic investigation are complexity and quantity. The complexity problem refers to the data collected being at the lowest level or in raw format. Non-technical people will find it difficult to understand such data.