TABLE OF CONTENTS By Kevin Cardwell and Craig Wright
In this chapter we will discuss the concept of conducting a forensic investigation on data that has been read, stored or manipulated on some type of mobile device. The techniques for investigating a mobile device are similar to that of our more traditional storage devices; however, there are some notable differences that we need to be aware of while collecting potential evidence. Chapter 9 also provides more detail on iPod forensics.
A PDA is a handheld computing device that combines a multitude of functions and features. These features include things like computing, telephone, fax and Internet. Additionally, the PDA can and most often does contain some form of networking or other form of connectivity capabilities. Today a PDA is a powerful device it can function as a cellular phone, fax sender, web browser and a personal organizer. These devices have reached such a level of power, and functionality they are in essence a mini-computer.
The PDA device has several components that we will discuss now. There are many components that can be part of the PDA. Our intent here is to just discuss some of the more common ones. The first component of the PDA is the Micro-Processor; all PDA devices have to have some form of a Micro-Processor. This is similar to any micro-processor, the only difference is the processor has a restriction on the size it can be. Another component of the PDA...
