Mobile Phone Forensics : Cell Site Analysis
Cell Site Analysis is used to establish the location or movement of a Phone when calls or text messages are made or received.
This service has been regularly used either for the prosecution to verify that the suspect was at the scene of a crime or alternatively by the defence to corroborate an alibi.
We utilise information provided by the service together with radio testing on site at the masts in question to coordinate the location. MD5 Ltd has the benefit of utilising over 16 years experience dealing with Mobile Phone Forensics evidence.
We are regularly asked to provide an expert opinion upon prosecution or defence Cell Site Analysis reports to comment upon procedures, test results and conclusions.
...
Mobile Phone Forensics : Damaged Handsets
We are able to repair most forms of damage to handsets to allow us to access the user data stored.
We are also able to recover data from water and fire damaged Mobile Phones by directly accessing the memory chips on the board, extracting and decoding the user data stored.
...
Mobile Phone Forensics : SIM Less Mobile Phones
Many Mobile Phones record the details of the last inserted SIM Card. Using specialist equipment we are able to recover these details and then gain access to all the user data stored on the handset including the call logs. This is useful when a Mobile Phone without a SIM Card inserted needs to be examined....
Mobile Phone Forensics : PIN Codes
A PIN code (Personal Identification Number) is a 4 to 8 digit code allowing the user to activate a lock feature, thus preventing unauthorised access and use of their SIM card. Although it is possible to enter another SIM Card into the handset to view the user data stored, the call logs are linked to the SIM Card that was present when the calls were made or received, therefore without this specific SIM Card it is not possible to view the call logs.
Without the PIN code it is necessary to apply for the PUK code (Personal Unlock Key) from the service provider. An 8 digit master code that each network provider retains for security reasons. It will over-ride a PIN locked SIM Card allowing full memory access.
We are able to partially clone a PIN code protected SIM Card to gain access to all the user data stored on the Mobile Phone including the call logs. It is still necessary to obtain the PIN/PUK code to access the data stored on the SIM Card and to verify the downloaded data for a complete Forensics investigation.
...
Mobile Phone Forensics : Security Codes
Many Mobile Phones have additional security features which enable a user to password protect the data held on a handset. This prevents access to most of the user data and makes a Forensic investigation impossible.
At MD5 Ltd we are able to access the memory chip and extract the password without altering any data. This allows us to enter the password as the user would to view and download the data.
...
Mobile Phone Forensics : Case Study
In a recent murder investigation information came to light that incriminating evidence in the form of text messages was stored on a suspect's Samsung Mobile Phone. A Forensics company examined the handset and failed to find any text messages. Using our specialised hardware and software we were able to recover over 52,000 deleted text messages including a text message which proved vital in the subsequent trial....
Mobile Phone Forensics : Deleted Data
The majority of data on modern Mobile Phones is stored on the handset memory rather than the SIM Card.
MD5 Ltd are the UK's leading specialist in the recovery of deleted data from handset and SIM Card memory. We are able to recover any form of deleted user data from all makes of handset including phonebook entries, call logs, text messages, pictures and videos etc.
MD5 Ltd provide training courses on the recovery of deleted data
...
Mobile Phone Forensics
MD5 Ltd can recover live and deleted data from all Mobile Phone handsets and SIM Cards .
We are able to forensically recover all viewable data stored on the handset and SIM Card using forensics hardware and software. Our investigations are conducted in a shielding unit to prevent the Mobile Phone from connecting to the network ensuring no data is altered during the examination.
We convert all Phone specific media (such as videos and recordings) into a format viewable on any personal computer.
We provide a printout and compact disk containing the data.
A statement is also provided for Court purposes.
We have extensive experience in providing expert witness testimony.
We provide expert opinion upon prosecution reports, procedures and findings.
...