mobile device forensics in academia - nist · mobile device forensics in academia how we find out...
TRANSCRIPT
![Page 1: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/1.jpg)
Mobile Device Forensics in Academia
How we find out what we need to find out.
![Page 2: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/2.jpg)
Mobile Device Forensics in Academia
![Page 3: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/3.jpg)
Academia
ac·a·de·mi·a /ˌakəˈdēmēə/
Noun. Origin 1945–50; Neo-Latin
the environment concerned with the pursuit of Research, Education, and Scholarship.
![Page 4: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/4.jpg)
"Study the past if you would define the future...."
- Confucius
![Page 5: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/5.jpg)
![Page 6: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/6.jpg)
![Page 7: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/7.jpg)
In 2002…
![Page 8: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/8.jpg)
![Page 9: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/9.jpg)
Michael Burnette
![Page 10: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/10.jpg)
![Page 11: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/11.jpg)
Palm DD (PDD) – Joe Grand Joe Grand
RAM.txtROM.txt
![Page 12: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/12.jpg)
2 years later…
2004
![Page 13: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/13.jpg)
Rick Ayers & Wayne Jansen
August 2004
![Page 14: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/14.jpg)
Tools and Operating Systems – THEN…
![Page 15: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/15.jpg)
![Page 16: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/16.jpg)
Barrie Mellars
![Page 17: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/17.jpg)
AT Commands
![Page 18: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/18.jpg)
Eoghan Casey
![Page 19: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/19.jpg)
![Page 20: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/20.jpg)
Mobile Forensics in Academia
• SIMs• Shielding• SMS• GPS• Hashing• Images/Videos• Legal
•Operating Systems• Android• BlackBerry• iOS• Maemo• Symbian• WebOS• Windows
•Other…
![Page 21: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/21.jpg)
SIM
![Page 22: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/22.jpg)
Shielding
![Page 23: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/23.jpg)
SMS
![Page 24: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/24.jpg)
GPS
![Page 25: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/25.jpg)
Hashing
![Page 26: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/26.jpg)
Images/Videos
![Page 27: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/27.jpg)
Legal
![Page 28: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/28.jpg)
Legal
![Page 29: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/29.jpg)
Operating Systems
![Page 30: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/30.jpg)
Android
![Page 31: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/31.jpg)
BlackBerry
![Page 32: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/32.jpg)
BlackBerry
![Page 33: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/33.jpg)
iOS
Jonathan Zdziarski
Sean Morrisey
Ryan Kubasiak
![Page 34: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/34.jpg)
Maemo
![Page 35: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/35.jpg)
Symbian
![Page 36: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/36.jpg)
WebOS
![Page 37: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/37.jpg)
Windows
![Page 38: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/38.jpg)
Comparing OS’s
![Page 39: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/39.jpg)
Comparing OS’s
![Page 40: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/40.jpg)
and a few others worth mentioning…
Not found in the Journals…
![Page 41: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/41.jpg)
Levels of Forensics
![Page 42: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/42.jpg)
Levels of Forensics
![Page 43: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/43.jpg)
Process for Examination
![Page 44: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/44.jpg)
JTAG
![Page 45: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/45.jpg)
Academic Journals and Conferences
![Page 46: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/46.jpg)
Australian Digital Forensics Conference – Edith Cowan University
http://ro.ecu.edu.au/adf/
![Page 47: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/47.jpg)
Digital Forensic Reasearch Work Shop
http://www.dfrws.org/2014/cfp.shtml
![Page 48: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/48.jpg)
Digital Investigation
http://www.journals.elsevier.com/digital-investigation/
![Page 49: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/49.jpg)
Hawaii International Conferenceon Systems Sciences
http://www.hicss.hawaii.edu/
![Page 50: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/50.jpg)
International Conference on Digital Forensics an Cyber Crime
http://d-forensics.org/2014/show/home
![Page 51: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/51.jpg)
International Journal of Digital Crime and Forensics
http://www.igi-global.com/journal/international-journal-digital-crime-forensics/1112
![Page 52: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/52.jpg)
International Journal of Digital Evidence
Archive.org – IJDE.org
![Page 53: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/53.jpg)
International Journal of Electronic Security and Digital Forensics
http://www.inderscience.com/jhome.php?jcode=ijesdf
![Page 54: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/54.jpg)
International Federation for Information Processing
http://www.ifip.org/
![Page 55: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/55.jpg)
Journal of Digital Forensic Practice
http://www.tandfonline.com/toc/udfp20/current#.U588efldWac
![Page 56: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/56.jpg)
The Journal of Digital Forensics, Security and Law
http://www.adfsl.org/journal.htm
![Page 57: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/57.jpg)
Small Scale Digital Device Forensics Journal
http://www.ssddfj.org
![Page 58: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/58.jpg)
![Page 59: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/59.jpg)
![Page 60: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/60.jpg)
A Call to ArmsAn Invitation for Research
![Page 61: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/61.jpg)
Anti-Forensics
![Page 62: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/62.jpg)
App Forensics
![Page 63: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/63.jpg)
Chinese Knockoffs
![Page 64: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/64.jpg)
The Cloud
![Page 65: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/65.jpg)
Flasher Devices
![Page 66: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/66.jpg)
Tool Validation
![Page 67: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/67.jpg)
Triage
![Page 68: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/68.jpg)
User Knowledge
![Page 69: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/69.jpg)
The Vendor Tools
Ad Hoc Reactive Methodology
a. User Has an Issue
b. Emails Problem to Vendor
c. Fixes Issue in Next Revision
Validation and Verification
How do we know what we don’t know!
![Page 70: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/70.jpg)
Drinking the Kool-Aid
Research:
• Prove or disprove a hypothesis
• Learn new facts
• Advance the common body of knowledge
We have a need to know!
![Page 71: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/71.jpg)
One more thing…
for Steve…
![Page 72: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/72.jpg)
Historical Review
![Page 73: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/73.jpg)
Mobile Forensics ToolsFrom A-Z
![Page 74: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/74.jpg)
![Page 75: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/75.jpg)
![Page 76: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/76.jpg)
![Page 77: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/77.jpg)
![Page 78: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/78.jpg)
![Page 79: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/79.jpg)
Research is sometimes difficult…
![Page 80: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/80.jpg)
But, research is necessary!
![Page 81: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/81.jpg)
![Page 82: Mobile Device Forensics in Academia - NIST · Mobile Device Forensics in Academia How we find out what we need to find out. ... Windows. Comparing OS’s. Comparing OS’s. and a](https://reader034.vdocument.in/reader034/viewer/2022051508/5acbcedc7f8b9aa1518b8b65/html5/thumbnails/82.jpg)
Thank you!
www.mislan.com