Document Control and
Contents
1. Modified to say Instructions for Cellebrite 5 4 Created to explain extracting data with the XRY 10 31 2013 Added issuing authority to header Page 2 of 2 All copies of this document are uncontrolled when printed2. Technical Procedure for Cell Phone Data Extraction Version 3 Digital Latent Evidence Section Effective Date 10 31 2013 Issued by Digital Latent Forensic Scientist Manager 1 0 2 0 3 0 4 0 5 0 Technical Procedure for Cellular Telephone Data Extraction Purpose The purpose of this procedure is to extract data from cellular telephones or SIM cards compatible with Cellebrite or XRY Scope This procedure describes the steps to be taken by personnel of the State Crime Laboratory in extracting data from various types of cellular telephones which may be submitted Definitions e Cellebrite A universal forensic extraction device for cellular telephones e XRY Forensic extraction software for cellular telephones e SAN Networked array of hard drives used as a digital evidence repository e Case Folder A folder designated by case number and located on the SAN for use in a specific investigation Equipment Materials and Reagents e Cellebrite unit with catalog of cellular telephone adapter cables e XRY software package with catalog of cellular telephone adapter cables e Thumb drive e Online SAN drive Procedure 5 1 Wipe the thumb drive with an approved data wiping utility prior to data extraction 5 2 Place the telephone into airplane mode if supported 5 3 Instructions for Cellebrite 5 3 1 Follow the instructions in Chapter 3 Cellular Telephones or Chapter 5 SIM Cards of the CelleBrite UFED User Manual fo
3. r data extraction 5 4 Instructions for XRY 5 4 1 Follow the instructions in Getting Started Starting a New Extraction of the XRY User Manual for data extraction 5 5 Once the data is extracted from the device to the thumb drive transfer the data from the thumb drive to the case folder located on the SAN storage drive 5 6 Standards and Controls N A 5 7 Calibrations N A 5 8 Maintenance N A 5 9 Sampling N A Page 1 of 2 All copies of this document are uncontrolled when printed Technical Procedure for Cell Phone Data Extraction Version 3 Digital Latent Evidence Section Effective Date 10 31 2013 Issued by Digital Latent Forensic Scientist Manager 5 10 Calculations N A 5 11 Uncertainty of Measurement N A 6 0 Limitations 6 1 A cellular telephone should be powered off when submitted for analysis During processing it is necessary to power on the telephone the device should not be allowed to connect to its cellular network Allowing the telephone to receive a signal from the cellular network can result in a change in the data contained on the internal memory of the telephone 7 0 Safety N A 8 0 References e CelleBrite UFED User Manual e XRY User Manual 9 0 Records N A 10 0 Attachments N A Revision History Effective Date Version Reason Number 09 17 2012 Original Document 05 03 2013 2 1 0 Added XRY to the purpose 3 0 Added XRY to the definitions 4 0 Added XRY to the equipment list 5 3
Download Pdf Manuals
Related Search