Digital Forensics for Handheld Devices (Hardcover)

Approximately 80 percent of the world’s population now owns a cell phone, which can hold evidence or contain logs about communications concerning a crime. Cameras, PDAs, and GPS devices can also contain information related to corporate policy infractions and crimes. Aimed to prepare investigators in the public and private sectors, Digital Forensics for Handheld Devices examines both the theoretical and practical aspects of investigating handheld digital devices.

This book touches on all areas of mobile device forensics, including topics from the legal, technical, academic, and social aspects of the discipline. It provides guidance on how to seize data, examine it, and prepare it as evidence for court. This includes the use of chain of custody forms for seized evidence and Faraday Bags for digital devices to prevent further connectivity and tampering of evidence. Emphasizing the policies required in the work environment, the author provides readers with a clear understanding of the differences between a corporate investigation and a criminal investigation. The book also:

• Offers best practices for establishing an incident response policy and seizing data from company or privately owned digital devices
• Provides guidance in establishing dedicated examinations free of viruses, spyware, and connections to other devices that could taint evidence
• Supplies guidance on determining protocols for complicated crime scenes with external media and devices that may have connected with the handheld device

Considering important privacy issues and the Fourth Amendment, this book facilitates an understanding of how to use digital forensic tools to investigate the complete range of available digital devices, including flash drives, cell phones, PDAs, digital cameras, and netbooks. It includes examples of commercially available digital forensic tools and ends with a discussion of the education and certifications required for various careers in mobile device forensics.

全球約80%的人口現在擁有手機，手機可以保存有關犯罪通訊的證據或日誌。相機、個人數據助理（PDA）和全球定位系統（GPS）設備也可能包含與企業政策違規和犯罪有關的信息。《手持設備的數位取證》旨在為公共和私營部門的調查人員提供培訓，探討了調查手持數位設備的理論和實踐方面。

本書涵蓋了移動設備取證的所有領域，包括法律、技術、學術和社會等學科的相關主題。它提供了有關如何收集數據、檢查數據並準備作為法庭證據的指導。這包括使用鏈式保管單來保管被扣押的證據以及使用法拉第袋來防止進一步連接和篡改證據。作者強調了工作環境中所需的政策，使讀者清楚了解企業調查和刑事調查之間的區別。本書還：

- 提供了建立事件響應政策並從公司或私人擁有的數位設備中收集數據的最佳實踐
- 提供了建立專用檢查程序，以防止病毒、間諜軟件和與其他設備的連接污染證據的指導
- 提供了在涉及外部媒體和可能與手持設備連接的設備的複雜犯罪現場確定協議的指導

考慮到重要的隱私問題和第四修正案，本書幫助讀者了解如何使用數位取證工具調查各種可用的數位設備，包括閃存驅動器、手機、PDA、數位相機和網絡筆記本電腦。書中還提供了商業上可用的數位取證工具的示例，並討論了從事移動設備取證相關職業所需的教育和認證。