Digital Forensics and Cyber Crime. Third International ICST Conference, ICDF2C 2011, Dublin, Ireland, October 26-28, 2011, Revised Selected Papers

Research Article

Windows Phone 7 from a Digital Forensics’ Perspective

Download
460 downloads
  • @INPROCEEDINGS{10.1007/978-3-642-35515-8_6,
        author={Thomas Schaefer and Hans H\o{}fken and Marko Schuba},
        title={Windows Phone 7 from a Digital Forensics’ Perspective},
        proceedings={Digital Forensics and Cyber Crime. Third International ICST Conference, ICDF2C 2011, Dublin, Ireland, October 26-28, 2011, Revised Selected Papers},
        proceedings_a={ICDF2C},
        year={2012},
        month={12},
        keywords={mobile smartphone forensics Windows Phone 7},
        doi={10.1007/978-3-642-35515-8_6}
    }
    
  • Thomas Schaefer
    Hans Höfken
    Marko Schuba
    Year: 2012
    Windows Phone 7 from a Digital Forensics’ Perspective
    ICDF2C
    Springer
    DOI: 10.1007/978-3-642-35515-8_6
Thomas Schaefer1,*, Hans Höfken1,*, Marko Schuba1,*
  • 1: University of Applied Sciences
*Contact email: sch.thomas@gmail.com, hoefken@fh-aachen.de, schuba@fh-aachen.de

Abstract

Windows Phone 7 is a new smartphone operating system with the potential to become one of the major smartphone platforms in the near future. Phones based on Windows Phone 7 are only available since a few months, so digital forensics of the new system is still in its infancy. This paper is a first look at Windows Phone 7 from a forensics’ perspective. It explains the main characteristics of the platform, the problems that forensic investigators face, methods to circumvent those problems and a set of tools to get data from the phone. Data that can be acquired include the file system, the registry, and active tasks. Based on the file system, further information like SMSs, Emails and Facebook data can be extracted.