The Most Important Pieces of Mobile Device Data to Collect On-scene

Written by Steve Lin

May 22, 2020

Digital Forensics For Law Enforcement

Recent surveys have shown that obtaining evidence data in the field is now a top priority for law enforcement agencies, as they try to keep up with increasing amounts of cases involving mobile device data. Shipping mobile devices to outside sources to conduct mobile forensics is time consuming and can lead to a loss of data or legal precedence.

However, getting access to mobile forensics tools at the agency level can be cost prohibitive. The Susteen Mobile Forensics Training Grant is set up for law enforcement agencies to acquire much needed mobile forensics software, the DATAPILOT 10 field triage device, and mobile forensics training for their departments at steeply discounted prices. 

By eliminating the need to send mobile devices away to the lab for mobile forensic needs, agencies can be equipped with the evidence data they need to make informed decisions fast while upholding chain of custody requirements.

The ability to quickly collect mobile device data in the field is critically important for law enforcement agencies, which is why we developed the DATAPILOT 10 field triage device to help first responders acquire important evidence immediately on-scene.

Here are the four most important pieces of mobile device data to collect on-scene using DATAPILOT 10.

  1. Images and videos. DATAPILOT quickly acquires this data in its entirety or by selecting only certain images and videos, and it will automatically add hashes to each media file to help uphold chain of custody. First responders can also OCR the acquired data on the DATAPILOT device, making it easier to search for investigation-relevant keywords in real-time.
  2. Text messages usually include metadata such as location information, timestamps, pictures and videos. Using DATAPILOT 10, investigators can pull message contents and their associated metadata, which is particularly helpful for traffic accidents so that investigators can see if the involved parties were texting while driving.
  3. Call history. DATAPILOT 10 automatically pulls call history data when a fast acquisition is conducted on a target device. This provides first responders with access to contacts, call timestamps and deleted data, which is fully searchable right on the DATAPILOT.
  4. Application data. For encrypted apps such as Snapchat, Facebook Messenger and WhatsApp, DATAPILOT’s linked screen capability allows the application running on the target device to be reviewed and captured as screenshots on the DATAPILOT. DATAPILOT will then convert the screenshots to OCR text so that the text-based messages are fully searchable.

For LE looking to acquire their own mobile forensic software, the Susteen Mobile Forensic Training Grant provides law enforcement agencies training on and access to state-of-the-art mobile forensics tools used throughout the United States, including the DATAPILOT 10 field triage device. This Grant should be used by law enforcement agencies to help build better cases and increase conviction rates, which in turn will benefit the community that they serve.

Click here to review the eligibility requirements and apply for the Susteen Mobile Forensics Training Grant.

Join Our Newsletter

Don’t miss our blog posts or new releases.  Sign up to receive updates in digital forensics.