Posts

USB2USB File Management

Now here is a brilliant design highly lauded by the design media back in 2012/2013 that for some reason has yet to see the light of day. Which is a pity really as this has the potential to provide the answer to a number of student final year project ideas. For instance: [Idea by Kkie21] "I was thinking about writing a program that would be put onto a USB stick and then once connected to a

Android Copy and Paste - what risks?

This discussion may be relevant and useful to the process of evidence gathering, eDiscovery investigations and examiner procedures. Experienced examiners or investigators, new to industry or students that may be unaware of this subject matter. The Android clipboard-based framework (Android Content Provider) enables copy and paste directly to and from the clipboard not only of simple text but

Metrology - USB part 1

With smartphones, tablets and other devices fitting the description Size-Scaled Digital Technology (SSDT) using USB physical connectivity provides for the simplest of examination DUT illustrations e.g the combination of three separate entities involved in inter-connection during an examination. 1) DUT (the target device (SSDT) containing suspected evidence 2) The physical medium (USB) to

Metrology

I haven't produced breakout web-links to the other forum discussions as this post is only raising a point about Metrology and standardisation in digital forensics. A recent forum question posted by a PhD student sought ideas for a research area. I suggested the following: You may wish to consider the process of: (a) examination of mobile/feature/smart phones, embedded devices etc with respect

Knowing DUT memory

A newcomer to mobile phone examination asked a question on another forum: "My first question is a general one: how can I know that the data I get in an extraction is everything that was on the device? For example, I recently acquired an image from a ZTE Z667G with prior knowledge that there were messages between 2 subjects using Facebook Messenger. The device was not able to be rooted with

FREE iPhoneReader research tool

 Research and development tools can provide students, newcomers and experienced examiners in the mobile forensics community with practical experience and exposure to logically recovered data isolating the various types of recovered data through a single GUI. Additionally, such tools help develop analytical and assessment skillsets. iPhoneReader.exe is one such tool that can help you do that.

Free Mobile JTAG Training and Tools

Visitors to trewmte.blogspot.com may recall a discussion thread posted back in 2012 regarding a JTAG Tutorial http://trewmte.blogspot.co.uk/2012/09/jtag-tutorial.html. The purpose of that thread was to enable students, newcomers and experienced mobile/smart phone examiners to get a feel for JTAG before undertaking such examinations or purchasing tools etc. Today, Kevin Swartz from