Preserving a mobile device without altering data is nearly impossible because mobile devices constantly transmit data using the network, Wi-Fi, or Bluetooth. A sound forensics manner should be used while collecting, preserving, and analyzing digital evidence to present it in court. One could extract data like SMS, contacts, installed applications, GPS data and emails, as well as deleted data.Īs per the definition by the carrier in 2006, Digital Evidence is data that supports or refutes a hypothesis about digital events.
#OXYGEN FORENSICS SEARCH FUNCTIONS SOFTWARE#
With these challenges in mobile forensics, syncing mobiles phone to a computer using software becomes easy. Each case or investigation of the new model needs to be considered differently and requires following steps unique to the case. The ratio of new models to designed versions of Windows and different security feature is very high, which makes very difficult to follow a single procedure. Mobile phones generally belong to a single person, so an analysis can reveal lots of personal information. Due to the exponential growth of the mobile market, the importance of mobile forensics has also increased. It is tied to Windows OS and all its different versions. Windows Mobile Forensics is a fast-growing field of digital forensics focused toward mobile devices.
![oxygen forensics search functions oxygen forensics search functions](https://www.digitalforensics.com/blog/wp-content/uploads/2018/07/browsers-1273344_960_720.png)
In this document, Windows Phone PIN and hardware encryption are also described including evidence location of Windows phone registry and Analyzing Windows phone PIN. It also shows different analysis methods of acquired data as well as location and structures of key artifacts. This document covers Logical Acquisition, Logical Acquisition over the cloud and Physical Acquisition using JTAG method. It is also crucial that Analysis techniques, Types of Artifacts that can be retrieved and the location of those artifacts are known to examiners or investigators. Windows phones hold a large market share, so it is essential that Examiners or Investigators are aware of techniques used to extract data from them.