Today, a mobile phone is not just a phone but it is a computer that you canalso use for calling someone. Besides, in criminal investigations theimportance of evidence from the mobile phone is increasing as more and morephones are seized at the Digital Forensic Department of the police. Indeed, theamount of memory cards of these mobile phones that need to be investigatedseparately is also increasing. Possible reasons are that the mobile phoneinvestigation software does not support the specific mobile phone or thespecific, for that investigation, artefacts. Sometimes the softwareinvestigates just the internal memory of the mobile phone and not the datawhich is written on the memory card. Fact is also that although the mobilephone was investigated by the dedicated software, the possibility that theassociated memory card contains additional important information is evident.The current procedure to get all of the usable information from a memory cardof a mobile phone is very time-consuming process and not user friendly. In thispaper, we present a new single tool to simplify the investigation of a memorycard from a mobile phone. We also test our tool with WhatsApp applicationinstalled on the memory card from different mobile phones.
展开▼
