Sign In Start Free Trial
Account

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Book Overview & Buying Mobile Forensics Cookbook
  • Table Of Contents Toc
  • Feedback & Rating feedback
Mobile Forensics Cookbook

Mobile Forensics Cookbook

By : Mikhaylov
5 (1)
close
close
Mobile Forensics Cookbook

Mobile Forensics Cookbook

5 (1)
By: Mikhaylov

Overview of this book

Considering the emerging use of mobile phones, there is a growing need for mobile forensics. Mobile forensics focuses specifically on performing forensic examinations of mobile devices, which involves extracting, recovering and analyzing data for the purposes of information security, criminal and civil investigations, and internal investigations. Mobile Forensics Cookbook starts by explaining SIM cards acquisition and analysis using modern forensics tools. You will discover the different software solutions that enable digital forensic examiners to quickly and easily acquire forensic images. You will also learn about forensics analysis and acquisition on Android, iOS, Windows Mobile, and BlackBerry devices. Next, you will understand the importance of cloud computing in the world of mobile forensics and understand different techniques available to extract data from the cloud. Going through the fundamentals of SQLite and Plists Forensics, you will learn how to extract forensic artifacts from these sources with appropriate tools. By the end of this book, you will be well versed with the advanced mobile forensics techniques that will help you perform the complete forensic acquisition and analysis of user data stored in different devices.
Table of Contents (12 chapters)
close
close

Windows Phone physical dump and backup parsing with Oxygen Forensic


The Oxygen Forensic program has already been described in Chapter 1, SIM Cards Acquisition and Analysis. In this recipe, we will describe data extraction from the physical dump of Windows Phone via Oxygen Forensic.

 How to do it…

  1. Oxygen Forensic has functionality that allows you to recover the screen lock password from a physical dump of a Windows Phone device. A physical dump can be obtained by the JTAG and chip-off methods.
  1. In order to import data from a Windows Phone physical dump, click the arrow that is located to the right of the Import File button on the Oxygen Forensic toolbar. In the drop-down menu, go to Import Windows Phone JTAG image ....

Selection of the type of data import

  1. In the opened window, specify the path to the physical dump. Click the Open button.
  2. In the new window, fill in the details of the case, such as Device alias, Case number, Evidence number, Place, Incident number, Inspector, Device owner, and Owner...

Unlock full access

Continue reading for free

A Packt free trial gives you instant online access to our library of over 7000 practical eBooks and videos, constantly updated with the latest in tech
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected

Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete

Confirmation

Modal Close icon
claim successful

Buy this book with your credits?

Modal Close icon
Are you sure you want to buy this book with one of your credits?
Close
YES, BUY