Posts

Showing posts from May, 2017

Forensic Chip Off - Notes in Progress

Thanks for those who have taken the Survey for Digital Forensics Tool Testing so far. For those who haven't taken the 4-mins survey which only has 15 easy to read questions to answer, please do so ( digital-forensics-tool-testing.html ). The larger the pool of anonymous answers being returned to the Faculty of Computer Science University of Sunderland for Dr. Graeme Horsman to analyse the better

Survey: Digital Forensics Tool Testing

Following on from the post "Study into Carving Validation" - http://trewmte.blogspot.co.uk/2017/05/study-into-carving-validation.html ,Dr Graeme Horsman from the Faculty of Computer Science University of Sunderland has produced a questionnaire designed to acquire industry consensus on the wider vista associated with tool testing in the field of Digital Forensics. Responses are anonymous and the

Study into Carving Validation

At the LinkedIn Group "Institute for Digital Forensics" ( https://www.linkedin.com/groups/2436720 ) we are pleased to announce Dr Graeme Horsman PhD, BSc (Hons), MJur (Dur), PGCertHE, SFHEA from the Faculty of Computer Science University of Sunderland has joined the Group and wants to seek assistance from practitioners, in-house test and examination departments and laboratories regarding thoughts

Contaminating Evidence SIX

The original question (in Part ONE) I believe was asked by someone starting out in mobile forensics. I tend to find it is easier to start with the 2G technology [SIM Application CLA (0xA0) / 2G context], which is still predominant in certain countries; although market research shows 2G falls below 30% globally by 2020. Furthermore, law enforcement and security still seize and find 2G SIM cards

Contaminating Evidence FIVE

To refresh, these discussions (links at foot of this article) originated because someone asked a question e.g. should I put a seized damaged SIM card into a seized mobile phone (handset), where both items have been found placed into the same Exhibit bag? The discussions have been to highlight helpful observations about what can be involved and learning the lesson to keep a damaged SIM card

Contaminating Evidence FOUR

In the last discussion it referred to APDU (application protocol data unit) - the communications unit between the SIM card reader and the SIM card. It also mentioned that APDU are set out in the Standards. There is some more information on this you may find helpful. The Test A Damaged SIM Card SOP could include a removal of doubt (ROD)technique. The purpose of this ROD technique assists the

eSIM Management Presentation