Co4516 Mobile Device Evidence Assessment Answer

This assignment will assess the following module learning outcomes.

LO1 – Critically evaluate alternative forms of acquisition

LO2 – Apply investigative methodologies for mobile devices

LO3 – Make informed judgements about issues, research and new developments within mobile device evidence and investigation

Write a report that examines the following

1.Evaluate the Logical, File System and Physical extraction methods afforded by the Cellebrite UFED4PC and Cellebrite Physical Analyzer software. Your evaluation should clearly identify the characteristics, strengths and weaknesses of each method and the range of data returned.

2.Section of the ACPO Good Practice Guide for Digital Evidence states that, “In order to comply with the principles of digital evidence, wherever practicable, proportionate and relevant an image should be made of the device. This will ensure that the original data is preserved, enabling an independent third party to re-examine it and achieve the same result, as required by principle 3.”.

Critically evaluate the role that proportionality plays in selecting the evidence extraction method for mobile devices.

3.Create, Test and Evaluate a Process Model for the Forensic Investigation of Mobile Devices. .

I.Produce a process model that prescribes best practice for the initial processing and evidence extraction of a mobile device. Explain and justify how you have synthesised your process model by referring to the relevant literature.

II.The process model should be applicable to a range of mobile devices and not restricted to smart phones. For example, you should include a range of devices.

III.Describe the types of evidence that will be captured when using your process model.