Data Acquisition From Cell Phone Using Logical Approach

Overview

Cell phone forensics to acquire and analyze data in the cellular phone is nowadays being used in a national investigation organization and a private company. In order to collect cellular phone flash memory data, they have two methods. Firstly, it is a logical method which acquires files and directories from the file system of the cell phone flash memory. Secondly, they can get all data from bit-by-bit copy of entire physical memory using a low level access method. This paper describes a forensic tool to acquire cell phone flash memory data using a logical level approach. By the tool, they can get EFS file system and peek memory data with an arbitrary region from Korea CDMA cell phone.