Research Article
Forensic Extractions of Data from the Nokia N900
@INPROCEEDINGS{10.1007/978-3-642-35515-8_21, author={Mark Lohrum}, title={Forensic Extractions of Data from the Nokia N900}, proceedings={Digital Forensics and Cyber Crime. Third International ICST Conference, ICDF2C 2011, Dublin, Ireland, October 26-28, 2011, Revised Selected Papers}, proceedings_a={ICDF2C}, year={2012}, month={12}, keywords={mobile forensics smartphone forensics Nokia N900 Maemo}, doi={10.1007/978-3-642-35515-8_21} }
- Mark Lohrum
Year: 2012
Forensic Extractions of Data from the Nokia N900
ICDF2C
Springer
DOI: 10.1007/978-3-642-35515-8_21
Abstract
The Nokia N900 is a very powerful smartphone and offers great utility to users. As smartphones contain a wealth of information about the user, including information about the user’s contacts, communications, and activities, investigators must have at their disposal the best possible methods for extracting important data from smartphones. Unlike with other smartphones, knowledge of forensic acquisition from the N900 is extremely limited. Extractions of data from the N900 are categorized into limited triage extractions and full physical extractions. The imaging process of the phone has been explained as is necessary for a full investigation of the phone. The types of data as called for in a limited data extraction have been identified, and the locations of these files on the N900 were detailed. Also, a script was created which can be utilized for a limited data extraction from a Nokia N900.