Seeking the truth from mobile evidence : basic fundamentals, intermediate and advanced overview of current mobile forensic investigations / John Bair, (Police Detective: City of Tacoma, WA), Part-Time Lecturer: Institute of Technology, University of Washington-Tacoma, WA, United States).

Includes bibliographical references and index.

Defining cell phone forensics and standards -- Evidence contamination and faraday methods -- The legal process : part 1 -- The legal process : part 2 -- The cellular network -- Subscriber identity module -- Device identification -- Triaging mobile evidence -- The logical examination -- Troubleshooting logical examinations -- Manual examinations -- Report writing -- Physical acquisitions -- Physical memory and encoding -- Date and time stamps -- Manual decoding MMS -- Application data -- Advanced validation -- Android user enabled security : passwords and gesture -- Nondestructive hardware and software solutions -- Phone disassembly and water-damaged phones -- JTAG (Joint Test Action Group) -- JTAG specialized equipment -- RIFF box overview -- Z3X box (easy JTAG) overview -- Thermal chip removal -- Nonthermal chip removal -- BGA cleaning -- Creating an image -- eMMC reading and in-system programing.