In many cases where a forensic interview is being conducted of a victim/witness, a digital forensic examiner or investigator can be conducting an analysis of the devices used by the victim/witness in an adjacent location. The examiner/analyst can be reviewing the contents of the device and confirming information as the interview progresses. Devices can be quickly previewed, forensically acquired and evidential data quickly documented and reported. Join Rich Frawley, our Digital Forensic Specialist and Director of Training at ADF Solutions, as he discusses the information that is available immediately from a mobile device and how an examiner can help decipher information being disclosed in a forensic interview. Rich will also discuss the information that is available in forensic acquisitions of mobile devices Attendees will learn:
● Differences between Advanced Logical Acquisition and a Physical acquisition
● What information is available in a Logical Acquisition
● Why Logical is better than Physical when time is critical
● Why complete physical acquisitions may be detrimental to your investigation
● How documenting via screen capture, with the proper tool, maintains the chain of custody