Introduction: Using the digital triage forensics model to collect and process cell phones and SIM cards

Pearson, Stephen; Watson, Richard

doi:10.1016/b978-1-59749-596-7.00012-7

Cited by 2 publications

(4 citation statements)

References 0 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…This fact also coincides with the advantages of another important field of forensics called "Digital Forensics Triage". Pearson and Watson (2010b) argue that empowering the first responder with the tools and training to find the actionable intelligence immediately, in the form of digital evidence can potentially:…”

Section: Properties Of Table 3: Sao Best Practices For Mobile Device mentioning

confidence: 99%

“…As depicted in Figure 11, Pearson and Watson (2010b) classify current digital forensics processing and digital forensics triage into four levels. In traditional digital forensics processing the first respondent collects and forwards all the media to the lab without any exploitation attempts.…”

Section: Benefits Of Sao Best Practices For Mobile Device Forensics Amentioning

confidence: 99%

“…In Pearson's research (Pearson & Watson, 2010b) the resources are relocated to the subprocesses where they are needed the most i.e. resource prioritization is emphasized.…”

Section: Benefits Of Sao Best Practices For Mobile Device Forensics Amentioning

confidence: 99%

“…Moreover, during digital forensics triage, conducting on-site examination and analysis can provide time sensitive leads Figure 11. Forensics processing pyramids (Pearson & Watson, 2010b According to Black and Yeschke (2003), suspects are psychologically more vulnerable during the first few hours of their initial contact with the police. This vulnerability is even higher if the contact occurs on the scene or at the suspect's place of business/dwelling.…”

Section: Benefits Of Sao Best Practices For Mobile Device Forensics Amentioning

confidence: 99%

See 3 more Smart Citations

Quantifying Relevance of Mobile Digital Evidence as They Relate to Case Types: A Survey and a Guide for Best Practice

Saleem¹,

Baggili²,

Popov³

2014

JDFSL

View full text Add to dashboard Cite

In this work, a survey was conducted to help quantify the relevance of nineteen types of evidence (such as SMS) to seven types of digital investigations associated with mobile devices (MD) (such as child pornography). 97 % of the respondents agreed that every type of digital evidence has a different level of relevance to further or solve a particular investigation. From 55 serious participants, a dataset of 5,772 responses regarding the relevance of nineteen types of digital evidence for all the seven types of digital investigations was obtained. The results showed that (i) SMS belongs to the most relevant type of digital evidence for all the seven types of investigations; (ii) MMS belongs to the most relevant type of digital evidence for all the types of digital investigations except espionage and eavesdropping where it is the second most relevant type of digital evidence; (iii) Phonebook and Contacts is the most relevant type of digital evidence for all types of digital investigations except child pornography; (iv) Audio Calls is the most relevant type of digital evidence for all types of digital investigations except credit card fraud and child pornography; and (v) Standalone Files are the least relevant type of digital evidence for most of the digital investigations. The size of the response dataset was fairly reasonable to analyze and then delineate by generalization, relevance based best practices for mobile device forensics, which can supplement any forensics process model, including digital triage. For the reliability of these best practices, the impact of responses from the participants with more than five years of experience was analyzed by using one hundred and thirty three (133) instances of One-Way ANOVA tests. The results of this research can help investigators concentrate on the relevant types of digital evidence when investigating a specific case, consequently saving time and effort.

show abstract

Section: Properties Of Table 3: Sao Best Practices For Mobile Device mentioning

confidence: 99%

Section: Benefits Of Sao Best Practices For Mobile Device Forensics Amentioning

confidence: 99%

“…In Pearson's research (Pearson & Watson, 2010b) the resources are relocated to the subprocesses where they are needed the most i.e. resource prioritization is emphasized.…”

Section: Benefits Of Sao Best Practices For Mobile Device Forensics Amentioning

confidence: 99%

Section: Benefits Of Sao Best Practices For Mobile Device Forensics Amentioning

confidence: 99%

See 2 more Smart Citations

Quantifying Relevance of Mobile Digital Evidence as They Relate to Case Types: A Survey and a Guide for Best Practice

Saleem¹,

Baggili²,

Popov³

2014

JDFSL

View full text Add to dashboard Cite

show abstract

A methodology to event reconstruction from trace images

et al. 2015

View full text Add to dashboard Cite

Introduction: Using the digital triage forensics model to collect and process cell phones and SIM cards

Cited by 2 publications

References 0 publications

Quantifying Relevance of Mobile Digital Evidence as They Relate to Case Types: A Survey and a Guide for Best Practice

Quantifying Relevance of Mobile Digital Evidence as They Relate to Case Types: A Survey and a Guide for Best Practice

A methodology to event reconstruction from trace images

Contact Info

Product

Resources

About