The cases that we are involved often include the examination of mobile phones that have been factory reset before they were seized or handed over for review and the device may contain no or limited user data. Rather than stopping the examination as soon as it becomes apparent that the phone was reset and contains […]
GDPR – Disclosure in Legal Proceedings
We have recently encountered issues and concerns as to whether the disclosure of data is possible under GDPR, notably from the CPS. As part of an investigation of the evidence, it is often necessary for a copy of the data extracted from a device by Police to be disclosed. This data required is normally from […]
Spotlight File Indexing Software Explained
Spotlight Indexing If a USB memory stick or hard drive is plugged into an Apple computer running OSX then it is likely that the system will have automatically created a folder called Spotlight-V100. By default, the folder also exists on the system drive itself. The Spotlight-V100 folder contains reates an index of all files and […]
Network Firewalls and the Open Systems Interconnect (OSI) Model
What is a Firewall? A Firewall is used to protect unauthorised access to a computer or a computer network. The firewall does this by sitting between the external network (e.g. the Internet) and the internal network or computer that it is protecting by filtering the packets sent to or from a network. Open System Interconnect […]
How To Identify When an IPhone or iPad was Factory Reset
When dealing with mobile phone evidence, it is common to encounter an iPhone and, occasionally, an iPhone can be examined that contains less information or communication on it than you were expecting. The phone may be an older model that contains either limited or only recent call records and messages. On these occasions it is […]