STATIC CONVERSION OF DYNAMIC INFORMATION FOR MOBILE PHONE FORENSICS

In this paper, an automated technique is proposed to perform forensic analysis for new generation of mobile phones. Real-time information that resides on RAM is normally missed by forensic tools. The proposed technique is designed in a manner that benefits such volatile information to increase the rate of evidence acquisition. Same experiment is conducted manually by Android SDK tools to compare the results. Several scenarios of application monitoring were simulated. Our results showed 92.8% of successful acquisition when compared to the results of existing Android tools. The technique is then applied in a HTC Wildfire phone to capture and store live data into the memory card for further analyses. The results of the last experiment is then compared with a previous work and shows a better message capturing for short time interval data acquisition.