Exam 20: Mobile Device Forensics

Just because an app is written for Apple's iOS operating system does not mean that it runs equally well or behaves the same on the iPad and iPhone.

What value can be gleaned from each generation of mobile device (1G,2G,3G,and 4G)? What are their strengths and weaknesses?

Match the word in Column 1 to its definition in Column 2.Each answer can only be used once. A)A cellular network facility that allows users to send and receive text messages B)A software mechanism that defines the way files are named, stored, organized, and accessed C)A set of standards for second-generation cellular networks D)Assessment of the actual geographical location of a mobile device E)A custom-designed program that controls the components of mobile devices and facilitates how they function. F)A snapshot of the file system of a mobile device G)A storage expansion card for a mobile device H)The traditional method of modulating radio signals so that they can carry information I)A term describing a wireless Local Area Network J)A spread spectrum technology for cellular networks K)A duplicate of data located on a mobile device L)The smart card that is inserted into a mobile device that identifies the user account to the network, handles authentication, and provides storage for basic user data and network information M)The basic components of a mobile device N)A communication channel that can provide higher-speed data communication than a standard telephone circuit O)A system for determining position by comparing radio signals from several satellites 1)Analog 2)Architecture 3)Broadband 4)CDMA (Code Division Multiple Access) 5)File system 6)Geolocation 7)GPS (Global Positioning System) 8)GSM (Global System for Mobile Communication) 9)Logical extraction 10)Operating system 11)Physical extraction 12)SIM card 13)SD card 14)SMS (Short Message Service) 15)WiFi

What does the ICCID contain?

What does 3G consist of?

Some tools,such as Cellebrite's UFED Touch,are quite clear about which devices support physical extraction.

The amount of information we can get from a mobile device varies greatly with the device in question.

You can't use a 1G phone to track a 15-year-old crime.

Describe the process of using each generation of mobile device to create a timeline and correlate events on the device.

How many types of chains of evidence are there?

Blackberry is the only mobile device that can be recovered directly.

What does 2G consist of?

________ crime assessment is a technique that can be used when faced with a physical crime (murder,rape,robbery,etc.)and there is a digital element to it-a computer,cell phone,or other mobile device.

A digital forensic investigation depends upon timelines for its success.When overlaid on the timelines of a physical crime,the timelines from mobile devices and computers provide an excellent yardstick by which to measure the play of events surrounding the crime itself.

Because a mobile device is similar a computer and transmits wireless signals,what laws does an investigator need to follow?

Working on what type of surface increases the danger of static electricity?

When working with mobile devices,________ searching is probably the most useful source of information available to the investigator.

Which is/are the most popular operating system(s)for mobile devices?

When should an examiner do a physical examination versus a logical examination,or both?

All mobile devices have architecture.