Certified Cell Phone Examiner to Investigate and Recover Evidences

No matter what kind of mobile phone is used, whether it is a smart phone device or a common cell phone, it is basically used for call and messaging purposes.  All kinds of cell phones are playing a significant part as digital evidences in investigations regarding criminal and civil litigations.  The technology which has been used in these cell phones enables them to save each and every repository about personal information.  That saved data is referred to as solid evidence. With the help of cell phone forensics useful information from the cell phones can be obtained like call records, location, files, multimedia files and appointments that can be used as admissible evidence in all the legal proceedings.  A  Certified Cell Phone Examiner or a forensic expert team is deployed by private or government sector so as to categorize the useful information or evidences.

Private or government sector cell phone forensic investigators are trained in use of advanced forensic tools and have expertise in many techniques used to recover distinct kinds of evidences.  Additionally, investigators deal with the most stringent aspects of cell phone forensic evidence recovery, such as device’s flash memory analysis, even when the device is un-operational, broken, or when the analysis is not compatible with the forensic application.  

• Cell Phone Examiners extensively deal with assembling evidence from the cell phones in varied sorts:
• Records of Call History
• Recovery of Contact List/ Phone Book
• Recovery of Text Message / Determining receiver & sender and thus creating a timeline for events
• Recovery of To Do List
• Analysis of Cell Phone Chat/ Email
• Recovery of Multimedia Message
• Extracting Audios/Photos/Videos
• Tracing of  Social Networking Activities
• Data Extraction from Physical Memory/Sim Cards
• Access Encrypted Data & Back Up Files / Decode Data
• Detecting of Spyware/ Malware

The extent of cell phone forensic examination is broadly increasing in several investigation areas.   They  primarily follow  this investigative measure in  order to deal with white collar crimes like securities fraud, bankruptcy frauds, investment frauds,  bank frauds, Ponzi schemes,  identity thefts and serious offenses like homicides, child pornography, cyber bullying, stalking, and espionage. Cell phone examiners are proficient in recovering lost/deleted information or evidence from all sorts of cell phone models including array of high-tech smart phones such as Blackberry, Androids and iPhones.

ICFECI provide Cell Phone Examiners specialized in tracking transactions, social connections, appointment schedules, communication by third party applications, meetings and location trace with respect to the event’s timeline.   Cell Phone Examiners are experienced and well trained in performing as a professional witness in presenting digital/electronic evidence.

Cell Phone Examiners handle preservation, acquisition, and processing of evidence, in a forensically sound manner.  Evidence custody is maintained in full compliance with codes and rules of evidence.

5 STEPS TO CONDUCT A COMPUTER FORENSIC INVESTIGATION

The increase in criminal activities involving the use of electronics warrants a structured investigation of criminal and civil litigations by employing computer forensic analysis. Digital forensic analysis is a meticulous process of uncovering data/ evidence that is relevant to the successful resolution of a case. However, deploying digital forensics to aid investigation demands a team of experienced computer forensic analysts, high end digital forensic tools and equipment and an organized lab where evidence recovered can be converted to structured reports thus helping the effective representation of defendants during trials.

Here is a detailed view of the process that can help you understand its role, limitations and the activities involved if you are willing to pursue a career in the stream.

 

Selecting a Process of Investigation

Digital Forensic has been a part of investigation procedures since 1984 when officials started employing computer programs to uncover evidence hidden in electronics and digital formats. The process has evolved to become more organized, sophisticated and well equipped with latest tools and technologies. However, choosing a particular method of investigation is the duty of the digital forensic analyst. A messy process of analysis can lead to the accumulation of random data and inconclusive evidence thus directly affecting the outcome of a trial. It is important to construct a design plan and to choose appropriate tools and software to conduct the investigation and ensure that not a single step has been bypassed or ignored. 

Acquisition

Once the case study is completed and a strategy decided upon, the first basic step involves the acquisition of data/ evidence in the form of digital documents, videos, images, files, financial records, accounts, recent computer activity, browsing history, emails and social media messages. Computer forensic analysts are experts in finding evidence by recovering deleted files, emails, social media activities, tracking and monitoring transactions, tapping into servers and finding relevant data to support an investigation. 

 

Also a dedicated part of computer forensics involves retrieving information from cell phones in the form of call records, location information, phonebook details, text messages and other personal details like schedules, appointment details, videos and image files. In this phase the analysts ensure that the evidence has been retrieved using methodologies that abide by the law and are done with proper approval of authorizing personnel. 

Identification

This phase requires analysts to separate the relevant discovery in digital format and converting them into a form understood easily by laymen, judges and juries alike. All the retrieved data can be preserved in the form of raw digital data.  The raw data may then be culled and processed. The resulting data can then be organized producing well systematized reports using forensic tools.  Organization of the retrieved data is accomplished by using sophisticated forensic tools like Forensic Toolkit (FTK), Mobile Phone Examiner (MPE+) and dtSearch as efficient document search tools.   

 

The relevant data may be hosted on an evidence review platform, accessible via internet.

Evaluation

This is the most important phase of digital forensic investigation which decides whether authentic and conclusive evidence has been discovered and subsequently determines the outcome of the litigation. The forensic analysts strive to find whether the information obtained is legitimate evidence and whether it can be presented during a trial. The components identified and preserved during the previous phases are correlated, a timeline of events is established and an inference is drawn that is relevant to the case and provides sufficient support in favor of the defendant. The Evaluation phase is an important element of effective representation of the client since it directly affects the successful resolution of a case. 

Admission

The carefully constructed reports and material evidence are of no use if they are discarded in a court of law as "inadmissible evidence". Therefore it is imperative that the proofs have been obtained using legal means, with permission from the authorizing entity, and the evidence is relevant. This factor will lend reliability to the evidence especially if it has been retrieved by a Certified Computer Forensic Examiner and ensure that the evidence is admissible at trial. 

Computer Forensic Investigation is a process which requires expertise and years of experience and desired results can be achieved only by following a well defined strategy.

ICFECI Expert Computer Forensic Analyst Services

ICFECI (Institute of Computer Forensic Examinations and Criminal Investigations) has an enviable reputation as one of the outstanding providers of computer forensic analyst services in Texas. The founder, Dan James has a long list of achievements in this field, the qualifications and the experience to carry out computer forensic analysis. He has also installed and maintained a computer forensics lab for the Federal Public Defender in the Northern District of Texas besides training staff and hosting eDiscovery services to help defendants. Another of his achievements is that of being Founder of the Institute of Computer Forensic Examinations and Criminal Investigations. ICFECI has a fully equipped lab for computer and cell phone forensics.

It takes years of experience and special knowledge as well as training to deliver ICFECI’s expert computer forensic analysis services. The analysis process is carried out under strict controls to identify, collect, examine and analyze digital data from computer hard disks and then present a report that supports the defendant’s case.

Typically the process starts with acquisition of the computer and its hard disk through established legal processes. The next process is that of evidence collection, which involves extraction of data or making a copy of the hard disk data without modifying or altering the original contents in any way.  Once data is extracted or copied the next stage is the all important forensic analysis of computer information. Analysis identifies anomalies or finds out information related to the case. The next step would be to document the findings in a format that presents information in a way that is favorable to the defendant’s case. Analysis helps reconstruct events, substantiate or refute allegation and mitigate the case against the defendant. A computer forensic expert may also have to carry out network forensic involving internet traffic and unearth data. The task could also encompass email data acquisition and analysis as may be relevant to the case. In all such instances it is crucial that the original data is not tampered with and that the examiner carry out and present analytical findings that are factual and conducive to his client’s case.

It does require specialized knowledge and training as well as certifications for an individual to be deemed capable of carrying out forensic analysis of digital data. Knowledge and experience count but, at the same time, it also requires a full-fledged lab with tools that will help in data extraction and analysis. ICFECI possesses both resources and, to its credit, can also claim to have helped train others in this area.

Should an individual become the defendant in a case where computers are involved, contact ICFECI. With ICFECI's arsenal of forensic tools, the defendant would have a strong defense team member. Testimonials from attorneys and associates are proof enough of ICFECI's competence and trustworthiness.

Source blog http://icfeci.livejournal.com/758.html