Essential Guidelines On Mobile Device Forensics

Mobile device forensics refers to the science of trying to recover digital evidence from smartphone or any mobile device. It is normally carried out under special conditions that do not interfere with investigations by using approved methods. In this guideline, you will acquire a deeper understanding about this fast growing specialty, technologies and procedures used as well as their relationship. Basic procedures discussed include acquisition, validation, preservation, examination, reporting as well as analysis of digital information from mobile devices.

Mobile Device Forensics

To begin with, you need to have thorough knowledge about software characteristics of various mobile devices. Know the kind of operating system they use, the messaging system and numerous other applications that can have important information to help in the investigation.

You need to know the memory characteristics of mobile devices. Retrieving information from RAM is quite challenging because information is stored temporarily. But with appropriate technology, this is possible.

You should also be aware of various forensic tools available today e.g commercial and open source. They help to collect information from the internal memory of handsets or SIM cards without altering data.

There are various methods which are used to extract data from mobile devices during forensic investigation. These are discussed here.

Firstly, we have what we call manual extraction. This is where information is obtained from a mobile device by manually viewing the contents displayed on LCD or any other display unit. Forensic examiners will manipulate the keyboard, touch screen and button to get precisely the information they want. It is the most commonly used method in most investigations.

Secondly, we have logical extraction. In this method, forensic investigators connect the mobile device to their work station through wired or wireless network such as Bluetooth and WiFi. This enables them to access information from the phone and transfer it to their work station.

The third method is chip extraction. It involves acquiring data directly from the flash memory of mobile devices. In fact, the flash memory is physically removed from the phone to get the required information.

The fourth method is called micro-read. It is one of the most advanced methods used in serious cases especially when there is a national crisis. Physical observation is recorded on NOR or NAND chip by using an electron microscope.

It is advisable to disconnect network so as to prevent any incoming form of communication e.g text, calls e.t.c that may change or alter the state of the information in the mobile device.

Forensic experts also need to ensure that evidence is identified clearly and accounted for appropriately. This can be achieved by taking photographs of peripheral cables, mobile phones, power connectors, removable media and the entire scene.

The way data or evidence is packed matters a lot. Forensic examiners should seal the mobile device in a good container. This should be followed by proper labeling. It should then be taken directly to the laboratory for processing because some mobile devices are very volatile.

After analysis and interpretation, forensic experts prepare a report and then hand it over to the relevant officers.

In conclusion, the above guidelines will help you to undestand what mobile device forensic entails and procedures used.

The Lost Malaysian Plane


The recent report that a military air craft saw a shadow in the region alleged to have been the crash site of the lost Malaysian plane has given hope to many of the family and friends of those on board the plane. The search for the said plane has now arrived at a crystal phase. The next five months will determine whether the plane will be lost or found on the ocean floor.


The flight, Malaysian Airlines MH370, has been searched for the last nine months. Search crews started combing the ocean floor from March 8th when the plane was first reported missing. The ill-fated plane had 239 passengers and crew on board. During the commencement of the search, there was a lot of area to cover because of the large radius that it was alleged to crash. Currently, the search has been narrowed down to approximately 40,000 square miles. Such an area is estimated to take a few months for the search to be completed.


An international search group spokesman gave several statements regarding the lost plane and the current search efforts. In one of the statements, the spokesman said that as long as there were no significant delays arising from weather, equipment issues and vessel failure, the present underwater search may be mostly completely by May 2015. He finished by telling the Weekend Australian that he could not divulge further details, but relevant updates would be consistently provided when available.


A report by the international search group has noted that the search will face great difficulty. There are several challenges the search team is likely to face during their task. To start with, the search area is close to the treacherous southern hemisphere. This area is famous for being whipped up by the popular ‘roaring forties’ wind. Additionally, the terrain is varied and it covers sub-sea valleys, mountains and volcanoes. Lastly, the water in the southern part of the Indian Ocean is extremely deep. All these are factors that can substantially hinder the search progress of the said area. Many experts and professionals believe that the said search area is the last real hope of finding the lost Malaysian plane.


There are some professionals and / or experts who believe the pane is completely lost. Their analysis is that the treacherous underwater conditions in the priority search area will make the plane impossible to find. An author by the name of Nigel Cawthorne is one of the professionals who believe the plane will never be found. In an interview Britain’s Express newspaper, he stated that the sea floor there is less well-known to man than the surface of the moon, the weather there is worst n the world and the current there is the worst in the world. He concluded by saying that the 40,000 mile search area is the most remote part of the planet.


Nigel Cawthorne is responsible for writing the book Flight MH370: The Mystery. He has on several occasions said that he believes search crews of the plan are in fact nowhere near the plane. He has also said there is no sensible theory as to the location of the plane. Lastly, the disappearance of the Flight MH370 of Malaysia Airlines has led to a number of conspiracy theories. Some state that the plane was hijacked by terrorist and landed at an unknown location while others say it was shot down by American armed forces.

What is physical data discovery?


Physical drive damage might be the outcome of electrical hitches, physical destruction, mechanical erosion or electronic component damage. The damage of business statistics e.g. data, spreadsheets and documents causes an interference of business and causes confusion, conflict and profit failure. If the recovery is the data is not fast, the end might not just be profit failure, but a probability of business termination.

Therefore, it is essential for a business to have a strategy for data recovery. The business proprietor must discover all of the probabilities and acquire an efficient strategy for recovering from statistics damage. This must comprise of obtaining the services of a recognized data discovery company.

By comprehending the kind of data failure and hard drive damage, the physical data discovery technique required become clear. File distortion and unintended deletion initiate logical drive damage. Thus, a software solution every so often solves this hitch. Nevertheless, a physical drive damage initiates large damages and the handling should be carefully and quickly. Only a physical data discovery and repair service possesses the knowledge and tools to salvage the lost data.

Grinding and clicking noises emerging from the computer are indications of impending damage. It is important to shut down the computer as soon as possible and get in touch with the data recovery services. A hard drive that does not swirl up or a computer that does not boot is another indication of physical data damage has taken place.

A reliable physical data discovery technician can examine the problems and advise on the next step of action for repair. There are various reasons for hard drive damage. Some are beyond our capability but prevention of others through liable operation is advisable.

Overheating will result in the damage of drive electronic elements. Recommendation of replacing of a damaged cooling fan making use of the computer is more likely. When using a computer, it is eminent of tear and wear. The user must watch and listen for any threatening signs of looming failure.

Electrical surges and spikes will harm both electronic and electrical mechanisms. A common power supple with acceptable surge suppression is a wise investment. Mismanaging of the computer will effect in premature drive damage. While notebooks and laptops are very vulnerable to this sort of failure, a desktop computer as well suffers failure from inadequate handling.

Transferring a computer from one place to another is a widespread cause of damage. Natural calamities are unavoidable, of course. Nevertheless, a business proprietor must strategize for physical data discovery in these circumstances as well.

Specialized Data Recovery Experts can only initiate physical data discovery from damaged drives efficiently. Hard disc file retrieval from physical damage needs distinct training and tools. Skilled experts will open up the drive and replenish defective elements in an authorized cleanroom. This area uses an air purifying techniques to eliminate dust and any other contaminants, which might result in more failure to the drive media and components. There is as well the use of exact replacements for component restoration.

New Protests in the USA

As if the streets aren’t busy enough during the holidays, here come the protestors. This seems to be trending all over the internet ever since the death of Trayvon Martin.

Thursday night protestors were laying in the middle of Conroy Road near the Mall at Millenia chanting “Hands up! Don’t shoot!” and “Whose streets? Our streets!”

This has become familiar sightings nationwide as groups continue to protest what they say was excessive police force in the deaths of unarmed black men, like 18-year-old Michael Brown in Ferguson, Mo., and 43-year-old Eric Garner in Staten Island, N.Y.

Protesters lay in the street for 15 1/2 minutes to represent the 11 times Garner said “I can’t breathe”, and another 4 1/2 to symbolize the number of hours Brown spent on the ground after his death.

This was causing the streets of the mall to have drivers honking, some in support, and others in frustration. “You’re inconvenienced for 15 1/2 minutes. Imagine what the black community feels like when we’re stopped and frisked,” said Keisha Robinson, 29, founder of the organization Brown Boys Matter and one of the protest’s organizers.

These protestors feltl it’s OK to inconvenience people for a little bit because there’s a purpose behind it, and sometimes people don’t see it until it’s at their front door, or in this case at their shopping mall.

There was a heavy presence of Orlando police officers on hand during the demonstration. There were mostly on-lookers as the protest was peaceful causing only minor traffic delays and no arrests.

One of the protestors said “The passion for what we were out here for took over”. “The people honking and telling us to go home didn’t matter.”

Another protestor said the rally was her way to show respect for the 20th century civil rights movement.

Tiffany Matondo and her family came in an SUV decorated with protest slogans “Hands up don’t shoot!” and “Stop police brutality!” “We’re not against the police. We just want them to be able to ask questions instead of shooting.

The Ebola Outbreak and Its Effects on Different States

Ebola Outbreak

The World Health Organization has declared an Ebola outbreak in the Democratic Republic of Congo. This was immediately after 66 reported cases and 49 deaths. It went on for three months.

However, the epidemic in Sierra Leone, Liberia and Guinea has been in effect for nine months with higher than 15,000 cases and 5,000 deaths. There seems to be no end to this.

The Story of One Outbreak


  • Experts state that experience is important. In former Zaire, this was the seventh outbreak. However, what is also important is that the origins of this was in a village which was very remote and the country’s healthcare workers work in a rudimentary system and therefore know how to detect Ebola.


  • The latest outbreak began when an expectant woman was cooking game which her husband had come home with. This family resided in Ikanamongo, which is a village in Northwest of DRC (Democratic Republic of Congo).


  • When this woman died from an illness which was not known, healthcare workers carried out a cesarean section to extract her fetus. This was the local tradition.


  • A woman could not be buried while carrying a fetus, stated Ben Monroe, an epidemiologist from Centers for Disease Control and Prevention. He has worked in DRC and Liberia also.


  • Each one of the health care workers who participated became ill. In the course of one week of this sad incident of the death of this woman on 11 August, 23 more cases came up and 13 of them died.


  • This set off a lot of panic in the system. Monroe stated that a person in the health authority in that area realized what was happening. Monroe explained that the Congolese people had heard about Ebola for many years.


  • They put in a reasonable amount of work into getting ready for such situations. Nearby, flows the Ebola River. Dr Peter Piot, who came across the Ebola virus in 1976, named the disease after the river.


  • It was also beneficial that the CDC had been carrying out studies in the same forest on monkey pox from 2010. Monroe stated and they visit each year and train the heath care workers on how to control infection and monitor disease.


  • A lot of public learning in this specific region is also conducted in addition to giving the health care workers training. Local health professionals were aware of how to recognize potential cases and put them in isolation.


  • This does not assist the patients a lot, though as the rate of death remains very high, although it controls the spread of the virus. The region has heavy forestation and majority of the people reside near the rivers. Travel and trade is not much.


  • The present boundaries spread to ancient kingdoms and people travel without restriction past the borders in motorcycles, trucks, on foot or by canoe. Plenty of informal trade is present and commerce as well.


  • Civil war spanning many years has reduced infrastructure and there is little trust in the government, particularly in Liberia.

Baby-smothering mom will serve most of 10 year sentence

Brenna Winter, a 19-year-old St. Cloud mother accused of smothering her daughter twice at Nemours Children’s Hospital, pleaded no contest in November to attempted-first-degree murder and aggravated child abuse.

Winter was in court Tuesday for her sentencing on charges but left the court house not knowing her sentence because the Judge relying on an obscure statute, ordered a prison term of minimum of six months in prison up to a maximum of 10 years. The exact time will be determined by the DOC and the agency said she won’t be getting out for about eight years, at least.

The Prosecutor asked for a sentence of at least 20 years, while the Assistant Public Defender asked for probation or house arrest, citing Winter’s youth, mental health and history of depression.

She was given credit for almost six months already served in county jail. The sentence suggested her release could be imminent, though Judge Murphy told Winter he intended to recommend she remain in prison for at least three years.

The judge barred her from having any unsupervised contact with her children, including her daughter and any future children she may have. He also ordered her to serve 20 years of probation and obtain a high-school diploma or GED within two years of her release.

Winter will be evaluated upon arriving at prison to determine her eligibility for “gain time,” but any such time earned for good behavior will be capped at 15 percent of her 10-year term.