JavaScript is disabled. Please enable to continue!
Managed Services >> Incident Response >> Digital Forensic Services

Digital Forensic Services

Sidebar Image

Mobile Phone Crime

Mobile Device Examinations

Mobile devices are powerful and multifunctional. They are widely used for taking pictures and videos, browsing the web and social networking as well as making phone calls. All this information, including deleted data, can be forensically acquired and investigated.

We can investigate:

  • Smartphones
  • Smartphone backup retrieval and examination from computers
  • GPS systems analysis including TomTom, Navman and Garmin
  • Establish GPS routes, Home, Favourites, Recents including deleted data
  • Recovery of mobile telephone data from synched GPS systems
  • Examinations of Backup examinations of mobile devices
  • Bypassing security features such as pins/passwords on handsets
  • Application investigations

 

Forensic Analysis of Mobile Phone Media

For forensic analysis, three components are relevant:

1. SIM (Subscriber identity module) card memory                                                                         

2. Handset memory                                                                           

3. Removable memory card 

Each is examined separately using a variety of forensic techniques.

 

Reporting

Our experts will produce evidential reports containing all the relevant data recovered from the device as required by the investigating team. Any media recovered will be provided in CDROM or DVD format suitable for court. We will help clients prepare witness statement and, if required, personally deliver this in court. Our investigators have retrieved and analysed stored data in several different languages and recovered information from damaged devices.

 

Computer Forensic Analysis

Forensic Image Analysis

Having identified which devices to interrogate, we take a forensic image of its contents to preserve the data in a form that can then be safely analysed. The original evidence is untouched and available for proceedings at later date.

 

Analysis

Highly trained analysts will then examine these images for any evidence consistent with the allegations. Remember, for computer forensics evidence to be legally sound it should be preserved and analysed forensically by a properly qualified expert.

Using a blend of experience, understanding and innovate tools and software, our analysts will carry out the search, recovery and analysis of all data stored on the device, including any that may be hidden in unallocated clusters where the user has tried to delete the file.

 

Data Preservation and Analysis

Using specialist forensic software, we will probe and analyse the acquired forensic image to see if any data is present that could be relevant to the investigation. The analysts often have to sift through mountains of data to uncover patterns of behaviour and evidence to connect or disconnect people with crime. This could involve retrieving a deleted text message from a mobile phone SIM card to find the time and date an incriminating message was sent. Or it could mean extracting a photograph from a memory card, and analysing it to find the camera that took the picture. It could even be as obscure as tracking down an incriminating email deleted from a laptop several years ago.

Analysing and interpreting digital media can paint a picture or timeline that shows how data has been created and used. It helps put data into context and can often help to prove or disprove alleged offences should an investigation go to court.

 

eDiscovery and Litigation Support

We provide an eDiscovery suite and software tools to assist customers with investigations and save considerable time searching large ‘data’ extractions for evidence.  Using this facility acquired data is forensically imaged and processed, and investigators can carry out ‘discovery’ investigations using our secure facilities. eDiscovery enables the facilitation of a secure, proficient and cost effective investigator-led review with the following key benefits:

  • All digital evidence is identified, captured and presented in a forensically-sound manner
  • Easy to use eDiscovery software suitable for use by non-technical staff
  • Fully-searchable and easily navigable data for production of legally admissible evidence
  • Investigator led production of evidential package assisted by our specialists
  • Facilities can also be made available where applicable to legal or other designated parties for simple and straightforward disclosure

Our eDiscovery software tools can be used to search and review data quickly and easily and with the assistance of our specialists, prepare an evidential package of the relevant data.

 

Imagery Analysis

Imagery analysis can play a vital role in any cyber incident support request.

Eurofins employs some of the UK's leading experts in the use of imagery in the legal context, and provide the widest range of enhancement and analytical products. The many services we offer include:

Data recovery: We can retrieve image data from various storage devices including, in some cases, imagery data that has been deleted or damaged. We are also able to deal with old legacy based tape recordings in multiple formats.                                          

Image processing: Including the production of working copies from original recordings and high quality copies in a variety of formats. Imagery may be enhanced and vehicles/persons tracked or obscured during this process.                                            

Image Enhancement: Imagery is often mediocre in terms of the detail it provides making enhancement essential. We can:

  1. De-multiplex video.
  2. Recover DVR imagery using the correct CODEC.
  3. Enhance images.
  4. Verify images as originals or copies.
  5. Determine whether an image has been physically or electronically altered.
  6. Duplicate images onto DVD, Blu-Ray or other formats as required.          

 

Image Comparison Services: Facial/Body Mapping.

A comparison is undertaken, from the available imagery, of the proportions and physical features of the faces and/or bodies of two or more individuals. This process includes:

Morphological Examination and Comparison

The imagery is studied in detail and a search for differences is made, as one significant difference would permit the conclusion that the persons being compared were not the same. If no significant differences are found, then similarities are observed and reported, feature by feature, and listed for the attention of the Court.                                               

Clothing/Vehicle/Object Comparison

A comparison, from imagery, of the proportions and physical features of the garments, vehicles or object in question to determine the level of support for their being one and the same or not, as the case may be.                                 

Image Interpretation and analysis

Our Imagery analysts are able to understand how a picture is recorded and how unusual aberrations may occur as well as how lighting, such as infrared, affects a scene; thereby correctly interpreting the subject matter.  They are able to provide a variety of services and advice beyond those already listed above, including detailed chronological reports covering a sequence of events.                        

 

Contact us for more information