Free Stuff

Useful Tools/Resources for Phone Examiners

Built-in Mobile Phone Web Browsers

A guide to locating web browsing artefacts in extractions of mobile phone handsets

Handset Re-branding

A guide to identifying handsets which are the same but sold under different make and model names

IMSI and ICCID prefixes

A list of IMSI and ICCID prefixes used by different communication service providers.

Default SIM PINs

A list of default SIM PINs used by different communication service providers.

Default Handset Security Codes

A list of default security codes used by different handset manufacturers.

Searching Hex Dumps – search terms and regular expressions

Handy tips and search expressions for finding SMS, ICCIDs, IMSIs, MMS and more in hex dumps of mobile phone handsets

Handset Imaging via USB Mass Storage

List of handsets that present part of their internal memory via USB mass storage, thereby allowing it to be imaged

White Papers

Presentations

Mobile Phone Video White Paper

Our free white paper on mobile phone video illustrates how developing a better understanding of the underlying file format can really help when you’re trying to recover deleted video from a memory dump. In the paper we use off-the-shelf carving tools to recover 3GP/MP4 video from memory dumps of Samsung handsets and then compare results with a Python carving script written specifically for the purpose. Download the white paper.

White Paper On Handset Imaging

Kevin Mansell collaborated with Royal Military Police’s digital forensics unit in Portsmouth to publish a white paper for the F3 Annual Conference 11-13 November 2008.  Titled  ‘Recovering Deleted Data from FAT Partitions Within Mobile Phone Handsets Using Traditional Imaging’ the paper explores how deleted and unallocated data can quickly and easily be retrieved from the internal memory of certain handsets using easily accessible data cables and computer forensic imaging tools. Download the white paper.

‘The Iceberg Presentation’

In this presentation, Kevin Mansell suggests that the forensic examinations of electronic devices such as mobile phones are akin to icebergs.  Find out more.