Mobile device and communications investigation

Analysis of Data and Communications from Mobile Devices

Mobile devices can contain important information about communications, contacts, files and activities related to a specific case. The analysis is carried out according to the available device, accessible data and the purpose of the examination.

What the Analysis May Include

• review and analysis of available messages and communications
• examination of contacts, files and application data
• analysis of metadata and other digital traces
• identification of relevant information from applications and devices
• documentation of the identified data according to the specific case

Deleted or Missing Data

In certain cases, it may be possible to identify or recover some deleted or inaccessible data. The outcome depends on the device, operating system, method of deletion and whether the information has been overwritten.

Communications and Applications

Where lawful access to the device is available, data from communication applications, contacts and other relevant sources may be analysed. No unauthorised access to third-party profiles, accounts or devices is carried out.

Preservation of Available Data

If the device may contain important information, continued use could alter or overwrite some of the available data. It is therefore advisable to preserve the device as close to its current state as possible until it can be examined.

Each case is assessed individually according to the available technology, access to the data and the specific purpose of the analysis.