Nt1310 Lab 7.5

1619 Words7 Pages

4.7.5 Data Preservation and Isolation from the Network. The main purpose of a digital forensic report is to keep the data integrity, avoiding any type of data alteration, in order to present valid evidences, for instance in a court. The use of not valid software to check the stored information in a mobile phone can alter these information. The action of receive new data can alter the information stored, for instance an automatic firmware update, or remote device control with the risks involved. Therefore, it is extremelly important have the device completely isolated from the network. (Androulidakis. 2012). There are different solutions to isolate a mobile phone from electro-magnetic radiation, and probably the best one is the use of a cage called “Faraday Cage”. The use of this solution is recommended not only because the isolation from external …show more content…

Secondly, the tool executes a code into the mobile phone RAM (Random Access Memory). And finally, this executable code sends the content of the memory locations to the Flasher Box. (Alghafli, Jones, and Martin. 2012). There are several advantages of using a Flasher Box, principally it is possible to retrieve hidden/deleted data, and a Flasher Box can recover information from a physically damaged mobile phone. The main problem of using the Flasher Box is that the data integrity after acquisition is not guaranteed, because this tool does not provide a hash to verify the data integrity. (Alghafli, Jones, and Martin. 2012). Other weaknesses are that some mobile phones do not permit full data acquisition of memory chips using this tool, or if the flasher connector is placed under the mobile phone battery, the researcher would need to remove the battery to connect the flasher tool, thus, the volatile data in the RAM will be lost. (Alghafli, Jones, and Martin.