Mobile Forensics Cookbook: Data acquisition, extraction, recovery techniques, and investigations using modern forensic tools

Discover the tools and techniques of mobile forensic investigations and make sure your mobile autopsy doesn't miss a thing, all through powerful practical recipes

Key Features

• Acquire in-depth knowledge of mobile device acquisition using modern forensic tools
• Understand the importance of clouds for mobile forensics and learn how to extract data from them
• Discover advanced data extraction techniques that will help you to solve forensic tasks and challenges

Book Description

Considering the emerging use of mobile phones, there is a growing need for mobile forensics. Mobile forensics focuses specifically on performing forensic examinations of mobile devices, which involves extracting, recovering and analyzing data for the purposes of information security, criminal and civil investigations, and internal investigations.

Mobile Forensics Cookbook starts by explaining SIM cards acquisition and analysis using modern forensics tools. You will discover the different software solutions that enable digital forensic examiners to quickly and easily acquire forensic images. You will also learn about forensics analysis and acquisition on Android, iOS, Windows Mobile, and BlackBerry devices. Next, you will understand the importance of cloud computing in the world of mobile forensics and understand different techniques available to extract data from the cloud. Going through the fundamentals of SQLite and Plists Forensics, you will learn how to extract forensic artifacts from these sources with appropriate tools.

By the end of this book, you will be well versed with the advanced mobile forensics techniques that will help you perform the complete forensic acquisition and analysis of user data stored in different devices.

What you will learn

• Retrieve mobile data using modern forensic tools
• Work with Oxygen Forensics for Android devices acquisition
• Perform a deep dive analysis of iOS, Android, Windows, and BlackBerry Phone file systems
• Understand the importance of cloud in mobile forensics and extract data from the cloud using different tools
• Learn the application of SQLite and Plists Forensics and parse data with digital forensics tools
• Perform forensic investigation on iOS, Android, Windows, and BlackBerry mobile devices
• Extract data both from working and damaged mobile devices using JTAG and Chip-off Techniques

Who This Book Is For

This book is aimed at practicing digital forensics analysts and information security professionals familiar with performing basic forensic investigations on mobile device operating systems namely Android, iOS, Windows, and Blackberry. It's also for those who need to broaden their skillset by adding more data extraction and recovery techniques.

Table of Contents

1. SIM cards Acquisition and Analysis
2. Android Devices Acquisition
3. Apple Devices Acquisition
4. Windows Phones and BlackBerry Acquisition
5. Clouds are Alternative Data Sources
6. Understanding SQLite Forensics
7. Understanding Plists Forensics
8. Deep diving into Android Forensics
9. iOS Forensics
10. Windows Phones and BlackBerry Forensics
11. Exploring JTAG and Chip-off Techniques

Igor Mikhaylov has been working as a forensics expert for 21 years. During this time, he had attended a lot of seminars and training classes in top forensic companies (such as Guidance Software, AccessData, and Cellebrite) and forensic departments of government organizations in the Russian Federation. He has experience and skills in computer forensics, incident response, cellphones forensics, chip-off forensics, malware forensics, data recovery, digital images analysis, video forensics, big data, and other fields. He has worked on several thousand forensic cases. When he works on a forensic case, he examines evidence using in-depth, industry-leading tools and techniques. He uses forensic software and hardware from leaders in the forensics industry. He has written three tutorials on cellphone forensics and incident response for Russian-speaking forensics experts.

He is the reviewer of Windows Forensics Cookbook by Oleg Skulkin and Scar de Courcier, Packt Publishing.