Forensic analysis of mobile phone

Zhou Zhiwen,Wu Shunxiang
2008-01-01
Abstract:Mobile phones have become a very important tool for personal communication. It is therefore of great importance that forensic investigators have possibilities to extract evidence items from mobile phones.Modern mobile phones store evidence items on SIM-cards as well as internal memories. With the advent of modern functionality, more and more items are stored in internal memory and SIM card. Proper forensic examination of such two Storage mediums,including recovery of deleted items,has not been possible until now. This paper presents to analyse how to extract the existent data by AT-commands and and how to extract the deleted items. The results show that the mobile forensic system could reach a better forensic purpose.
What problem does this paper attempt to address?