Technological
advances have created mobile communication
devices - from Personal Digital Assistants (PDAs)
to mobile telephones - all capable of browsing
the Internet and accessing email. |
Whilst mobile
devices such as telephones can hold only
a relatively small amount of data when
compared to desktop computers, the
information embedded within such modules
can be extremely revealing.
Mobile telephones contain memory modules
and data storage areas where digital
evidence can be found - evidence that
prove a crucial part of a criminal or
civil prosecution. Text messages that
have long been deleted may be recovered,
providing a revealing look at intentions
and actions. Call history between
mobiles and landlines helps provide
detail on acquaintances and
relationships. Cell site analysis (also
known as 'timing advance') can
allow the
physical movement of a handset to be
plotted - illustrating where a suspect
may have moved to and from over a period
of time. Forensic evaluations of mobile
devices can reveal a wealth of material
of value to investigators and legal
specialists.
Our laboratories are equipped to
securely image, extract and preserve
digital evidence from all commercial
brands of mobile telephones, PDAs, and
handheld devices, including all models
marketed by:
* Blackberry / Motorola / Nokia
* LG / NEC / Panasonic
* Sagem / Sendo / Samsung
* Sharp / Siemens / Sony / Ericsson
All mobile devices are built differently
and require special techniques to ensure
assessments conducted are done so in a
forensically sound manner, and that the
information extracted will endure the
scrutiny of a court of law. The mobile
communications market is fast moving and
new makes, models, standards and
protocols, emerge into the marketplace
on an almost monthly basis. From
Bluetooth to WAP, digital cameras to
in-built GPS receivers, the complexity
and capabilities of such devices is
constantly evolving. And the networks
protocols and network capacity are also
developing, illustrated by the
introduction of 2.5G, and 3G mobile
phone technology, and the advances in
SIM (Subscriber Identity Module) e.g. 'SuperSIM'
modules.
Our analysts contribute to a number of
leading working groups as well as
undertaking constant research into these
spheres, to ensure our approaches to
handling mobile evidence remain in touch
with leading Best Practice.
We offer a 24x7 comprehensive
investigation service that involves the
recovery of digital information. Our
experts work with clients to determine
the nature of incidents and use
established computer forensic
investigation techniques to preserve
evidence, whilst maintaining its
continuity and integrity. Our analysts
are Certified Information Security
Professionals (CISSPs) and trusted to
undertake the most sensitive of
investigations.
Our service includes the post-analysis
review of investigation results and the
preparation of a detailed investigation
report. If criminal or other legal
proceedings are necessary we can produce
witness statements and attend court to
deliver expert testimony in support of
the analysis undertaken and material
found.
All investigations are conducted within
a physically and electronically secure
environment, although we are equipped to
and when undertaken at client premises
we strive to conduct our work with
minimal disruption to your business.
Our
systematic approach to investigations
can significantly reduce the cost and
time of an internal investigation (and
of any court-ordered disclosure). |
| |
|
 |
What is 'Digital Evidence'?
Digital evidence or electronic
evidence is any probative information stored or
transmitted in digital form that a party to a court case
may use at trial.
The use of digital evidence has increased in the past
few decades as courts have allowed the use of e-mails,
digital photographs, ATM transaction logs, word
processing documents, instant message histories, files
saved from accounting programs, spreadsheets, internet
browser histories, databases, the contents of computer
memory, computer backups, computer printouts, Global
Positioning System tracks, and digital video or audio files.
As with any evidence, the proponent of digital evidence
must lay the proper foundation. Courts largely concerned
themselves with the reliability of such digital
evidence. As such, early court decisions required that
authentication called "for a more comprehensive
foundation." US v. Scholle, 553 F.2d 1109 (8th Cir.
1976).
Nevertheless, the "more comprehensive" foundation
required by Scholle remains good practice. The American
Law Reports lists a number ways to establish the
comprehensive foundation. It suggests that the proponent
demonstrate "the reliability of the computer equipment",
"the manner in which the basic data was initially
entered", "the measures taken to insure the accuracy of
the data as entered", "the method of storing the data
and the precautions taken to prevent its loss", "the
reliability of the computer programs used to process the
data", and "the measures taken to verify the accuracy of
the program".
In the
United Kingdom the admissibility of computer generated
and electronic evidence is governed by the Best Practice
Guide drafted by the 'Association of Chief Police
Officers (ACPO).
The latest version of the ACPO Good
Practice Guide is available for free
download here.
All
forensic assessments and investigations undertaken by
specialists from BURTON DIGITAL are confirmed to comply
in full with the ACPO guidelines, ensuring o findings to
assist in defence case preparations are recognised and
admissable in the UK courts. |
|
|
|
