Mobile forensics helps investigate crime and prevent acts of terrorism. But how exactly can one get that evidence if the phone is locked with a passcode, the data partition is encrypted, or if everything that's available is a computer that synced with the phone? What can a police officer do to preserve evidence on a seized smartphone? How is it possible to image a passcode-protected device? Why some information is unavailable even if the phone is unlocked, and what can be done with it? Is there access to deleted calls and messages? Is it possible to decrypt a BitLocker volume with the help of Microsoft Account, and how can one break into an online account by running a local attack? In this book, we address these and many other questions related to mobile forensics and data acquisition.
"Working in the field of mobile forensics, I'm constantly monitoring relevant publications", says Oleg Afonin, ElcomSoft researcher. "To my surprise, few publications exist offering anything close to systematic approach. They talk about devices or go deep into one or another acquisition method without giving the reader the whole picture. No wonder evidence is routinely lost in transition or as a result of the wrong acquisition method applied to the wrong hardware. The lack of general understanding of mobile forensics causes incidents such as suspects remotely wiping their phones, or the police locking down or destroying valuable evidence while seizing mobile devices. In our book, we tried to tell the whole story, giving our readers good understanding on what they are going to do with a mobile device, how they are going to do that and, most importantly, why they'll be doing it."
Mobile Forensics - Advanced Investigative Strategies can be ordered from Amazon.com (paperback or Kindle Edition) or purchased directly from PACKT Publishing bookstore (DRM-free PDF e-book or paperback + e-book, free delivery within EU, US).
Packt Publishing: https://www.packtpub.com/networking-and-servers/mobile-forensics-advanced-investigative-strategies
Barnes&Noble customers may purchase the Nook edition from B&N: http://www.barnesandnoble.com/w/mobile-forensics-oleg-afonin/1123781364?ean=9781786464088
Format: 7 1/2 x 9 1/4 paperback, 412 pages
Publisher: Packt Publishing
For more information or to contact the authors, visit https://www.elcomsoft.com/
About the Authors
Oleg Afonin is a researcher and an expert in digital forensics. He is a frequent speaker at industry-known conferences such as CEIC, HTCIA, FT-Day, Techno Forensics and others. Oleg co-authored multiple publications on IT security and mobile forensics. With years of experience in digital forensics and security domain, Oleg led forensic training courses for law enforcement departments in multiple countries.
Vladimir Katalov is CEO, co-founder and co-owner of ElcomSoft Co.Ltd. Vladimir manages all technical researches and product developments in the company. He regularly presents at various events and runs security and computer forensics trainings for computer investigative committees and other law enforcement organizations.
About ElcomSoft Co. Ltd.
Founded in 1990, ElcomSoft Co.Ltd. develops state-of-the-art computer forensics tools, provides computer forensics training and computer evidence consulting services. Since 1997, ElcomSoft has been providing support to businesses, law enforcement, military, and intelligence agencies. ElcomSoft tools are used by most of the Fortune 500 corporations, multiple branches of the military all over the world, foreign governments, and all major accounting firms.
SOURCE ElcomSoft Co. Ltd.