Cell Phone Analysis Part 1At a crime scene, grab the cell phone. Uninstall Oracle Enterprise Manager 11G. The Columbus, Ohio Police and the Ohio High Intensity Drug Trafficking Area offer a one day course on Cell Phone Analysis across the U. S. Taught by Christine Roberts, the class familiarizes investigators and patrol officers alike with the basics of cell phone technology, the information and data stored on these phones, forensic methods used in retrieval, cell tower site analysis, and the info available from cellular service providers. This is all geared to better understanding the use of mobile devices as evidence in criminal trials. The course covers the use of information stored on the handset, SIM cards, expansion cards, prepaid phones, live and historical tracking, cell based financial crimes, payments and money laundering, cyber stalking and cloud storage. An incredible amount of evidence is just sitting on smartphones waiting for you to access it. You would never overlook a drop of blood at a crime scene. A cell phone may even be more helpful, and that includes info deleted from the phone. Juries understand cell phones, cell phone towers and cell phone pinging. They also understand cell phones can put the suspect in the proximity of the crime. Or at least the cell phone was at the area and the suspect testified that he never lets the cell out of his possession. Cell phones and cellular service providers are a vast source of evidence that investigators are just now grasping. Mobile phones are one of the most important developments in technology in the courtroom in the last five years. When a person types and sends an e mail or text message, they create a piece of evidence that can be used for or against them. Cell records can be used in court to show exactly where someone was or was not and to whom they were talking at a particular time. Electronic and Retained Evidence. Two types of evidence can be retrieved from a cell phone 1 electronic evidence and 2 retained data evidence. Electronic evidence includes the users call history, contacts phone book, calendar information, and information stored on the SIM card. Retained data evidence is telecom records involving the detail of calls made and received and the geographical location of the mobile phone when a call took place. Part One will cover electronic evidence. Part Two November 2. LAW and ORDER will cover retained evidence. Cell Phone Text Message Retrieval Software' title='Cell Phone Text Message Retrieval Software' />Electronic evidence is stored in different places depending on the channel access method of the phone. GSM global system for mobile communication is typically used by AT T and T Mobile. With this and the i. DEN integrated digital enhanced network phones, evidence is stored on the handset and the SIM card. CDMA code division multiple access is typical of Verizon and Sprint Nextel. The evidence here is all on the handset. When women ask whats the best way to tap my husbands cell phone theres only one answer I can give. How to Access and Read the iPhone SMS Text Message Backup Files. There is no SIM card with CDMA phones. However, this is slowly changing the new LTE network will require all phones to have a SIM card. Every handset has a unique identification number. On CDMA phones, an ESN electronic serial number or a MEID mobile equipment identifier 5. On GSM phones, an IMEI international mobile equipment identity is used. Both are found under the battery. The point is this you dont need to know the phone number for the handset. Cell Phone Text Message Retrieval Software' title='Cell Phone Text Message Retrieval Software' />You can subpoena the MEIDESN or IMEI to obtain call detail records. The SIM card of a phone can contain a lot of valuable evidence. If you see these loose and lying around, grab them, said Roberts. Then you can subpoena the ICCID number to the network provider and receive the toll records associated with that phone. Electronic evidence is fragile. It can be altered, damaged or destroyed by improper handling or improper examination. Special precautions should be taken to document, collect, preserve and examine this type of evidence. The Big Three. The address book, call history and text messages are the Big 3 in your investigation. The address book has contact information that gives insight to the social network of the suspect or victim. It can be used to link a suspect to a victim and to provide a list of people to interview. Textlightaudio vibration DialMyCalls. DialMyCalls is a completely webbased system that sends emergency weather alerts via phone call, text message, and email. Mobile device forensics is a branch of digital forensics relating to recovery of digital evidence or data from a mobile device under forensically sound conditions. It can provide a cross reference between real names and nicknames. And the picture next to the contact number can even put a face to a name. The call history gives even a deeper insight to the activities of the owner. You can see the last received and sent calls, when they occurred and their duration. The duration is important for indirect conclusions. A wrong number going to voice mail would have a duration of 3. Text messages are becoming more and more important in both criminal and civil proceedings. Texts are one of the most common forms of electronic evidence. Texts offer concrete and direct information in contrast to the call history and address book that only offer indirect and inferential information. These contain the actual words written by the owner or intended for the owner. Mobile phone spam is a form of spam unsolicited messages, especially advertising, directed at the text messaging or other communications services of mobile phones. Windows OS and Mac OS X supported Data recovery software recovers deleted files or data from your hard disk sectors, pen drive and other storage devices. But dont just send an email, or god forbid, text. Trudy Steinfeld, the Executive Director of Career Development at New York University, recommends you pick up the. That is good news for evidence in court. Text Is Perishable. The bad news is that text messages are perishable. Cell phone companies no longer store or extract text messages. Verizon does not keep text messages on their servers for very long, between three and seven days. AT T stores the text message for 4. The best chance to get any text message information is by searching the handset. If the telecom company keeps text messages, then an option is to fax a letterhead preservation request to the cell service provider. If this is done in time, the cell phone company will hold the data for a police agency for up to 9. If the text messages have been deleted from the handset, a cell phone forensic specialist must become involved. Even still, try and maybe are what you are likely to hear. However, these forensic specialists pride themselves on doing the difficult and complicated. The lesson is the text is not deleted until the cell forensics folks with all their expensive retrieval hardware and software say it is deleted. Unlike text messages, voice mail is stored at the service provider for at least 3. Voice mail can be more damaging evidence than text messages. Texts dont indicate tone of voice or sincerity. Voice mail reveals much more of a persons intentions, especially in stalking or intimidation cases. Some of todays smartphones store voicemail on the handset so dont think that all voicemail is deleted. Voicemail is easy to copy. Audacity. com offers free software. Cell. Tap from JK Audio allows audio recording, including live recording, from any cell phone, not just smartphones. On the other hand, voice mail can also be deleted remotely. Photos on SD Cards. People are proud of their crimes. They take cell phone pictures of the crimes as trophies, and sometimes cell phone videos of the crime in process. Data on the phone can be used to determine the exact date and time an image was taken, and possibly even a location. Geotagging is the process of adding geographical identification to photos and videos. Geotags are automatically embedded in photos taken with smartphones. When these photos are uploaded to the Internet, they remain tagged with location data. Got a photo of a marijuana grow operation Got a photo of a kidnap victim The image probably contains the geotag with the latitude and longitude. We often overlook this, Roberts said. One place to look for images is the expansion memory SD cards. The i. Phone does not use an SD card. It uses its hard drive instead. All other phones use an SD card. A 3. 2 GB SD card can hold 1.