Physical extraction is a snapshot of the file system showing what the file system wants you to see.

Related Questions

• Q24:

  Inhaltsverzeichnis Show

  • Related Questions
  • What is a file system extraction?
  • What is a logical extraction?
  • What techniques can extract data from an encrypted device?
  • What type of evidence can be extracted from a mobile device?

  2G and 3G phones are closest in architecture and design to a PC.

• Q25:

  A digital forensic investigation depends upon timelines for its success. When overlaid on the timelines of a physical crime, the timelines from mobile devices and computers provide an excellent yardstick by which to measure the play of events surrounding the crime itself.

• Q26:

  Logical extractions are useful only when the physical option is not available because of the device itself.

• Q27:

  Each SIM card has an international mobile subscriber identity number that associates the phone with the subscriber's mobile network.

• Q28:

  From a forensic perspective it is a toss-up as to how much data you may be able to extract from a 2G device.

• Q30:

  Some tools, such as Cellebrite's UFED Touch, are quite clear about which devices support physical extraction.

• Q31:

  An integrated circuit identification (ICCID)number is located on each SIM.

• Q32:

  All mobile devices use SIM cards.

• Q33:

  By cloning the SIM card, the investigator retains a perfect copy for evidentiary purposes.

• Q34:

  Blackberry is the only mobile device that can be recovered directly.