Introduction to Windows Mobile Forensics

Details

Ressource 1Download: 1-s2.0-S174228761000006X-main.pdf (3138.37 [Ko])
State: Public
Version: author
Serval ID
serval:BIB_137618718DB5
Type
Article: article from journal or magazin.
Collection
Publications
Title
Introduction to Windows Mobile Forensics
Journal
Digital Investigation
Author(s)
Casey Eoghan, Bann Michael, Doyle John
ISSN
1742-2876
Publication state
Published
Issued date
2010
Volume
6
Number
3
Pages
136-146
Language
english
Abstract
Windows Mobile devices are becoming more widely used and can be a valuable source of evidence in a variety of investigations. These portable devices can contain details about an individual’s communications, contacts, calendar, online activities, and whereabouts at specific times. Although forensic analysts can apply their knowledge of other Microsoft operating systems to Windows Mobile devices, there are sufficient differences that require specialized knowledge and tools to locate and interpret digital evidence on these systems. This paper provides an overview of Windows Mobile Forensics, describing various methods of acquiring and examining data on Windows Mobile devices. The locations and data formats of useful information on these systems are described, including text messages, multimedia, e-mail, Web browsing artifacts, and Registry entries. This paper concludes with an illustrative scenario involving MobileSpy monitoring software.
Keywords
Windows Mobile Forensics, Windows CE forensics, Mobile device forensics, Cell phone forensics, CEDB database, Transaction-safe FAT, TFAT, Mobile spyware, MobileSpy
Create date
16/01/2019 21:48
Last modification date
20/08/2019 12:42
Usage data