The forensic team that I've managed in the past has used the Cellebrite
UFED device. This is a universal data extractor consisting of both software
and hardware. It does take some training to become proficient and data
extraction is not always successful, particularly with a missing or
uncooperative device owner. Encase and FTK also have some tools that can be
used on mobile devices.

The challenge is that the collection devices and software will always be a
bit behind the current state of the art in mobile device OS development, so
a device running the latest and greatest of Android or iOS may not work
with whatever tool that you are using.

In this space, if you don't do collections from mobile devices very often,
it might be best to contract with a forensic specialist firm to perform the
collection.

Patrick Cunningham, CISM, FAI

List archives at http://lists.ufl.edu/archives/recmgmt-l.html
Contact [log in to unmask] for assistance
To unsubscribe from this list, click the below link. If not already present, place UNSUBSCRIBE RECMGMT-L or UNSUB RECMGMT-L in the body of the message.
mailto:[log in to unmask]