Windows Mobile advanced forensics

Digital Investigation

Volumn 6, Issue 3-4, 2010, Pages 147-167

  Klaver, C ^a  

^a NETHERLANDS FORENSIC INSTITUTE   (Netherlands)

Author keywords

CEDB EDB database; Heap; Live forensics; Logical physical acquisition; NAND flash; TFAT file system; Windows mobile

Indexed keywords

COMPETITION;

FILE SYSTEMS; HEAP; LIVE FORENSICS; LOGICAL/PHYSICAL ACQUISITION; NAND FLASH; WINDOWS MOBILES;

COMMERCE;

EID: 77952241813     PISSN: 17422876     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.diin.2010.02.001     Document Type: Article

References (34)

1. Association of Chief Police Officers (ACPO). Good practice guide for computer-based electronic evidence. Online. cryptome.org/acpo-guide.htm
2. Ayers R., Jansen W., Cilleros N., and Daniellou R. Cell Phone Forensic Tools: An Overview and Analysis. Online (October 2005), National Institute of Standards and Technology.
3. Boling D. Windows CE.NET advanced memory management. Online (August 2002). msdn.microsoft.com/en-us/library/ms836325.aspx
4. Breeuwsma M., de Jongh M., Klaver C., Knijff R.v.d., and Roeloffs M. Forensic data recovery from flash memory. Small Scale Digital Forensics Journal 1 1 (June 2007)
5. Breeuwsma M. Forensic imaging of embedded systems using JTAG (boundary-scan). Digital Investigation 3 (March 2006) 32-42
6. BusinessWeek, Fiat and Microsoft Launch Blue&Me. Online (February 2006). www.businessweek.com/autos/content/feb2006/bw20060202_986426.htm
7. Canalys. Smart phone market shows modest growth in Q3. Online (November 2009). www.canalys.com/pr/2009/r2009112.html
8. Cellebrite, UFED Physical Pro. Online. www.cellebrite.com/UFED-Physical-Pro.html
9. Eide J., and Skogheim O.J.O. Forensic analysis of an unknown embedded device. Online (June 2006). ntnu.diva-portal.org/smash/get/diva2:121991/FULLTEXT01
10. Hengeveld H.W. Smartphone-policies. Online. www.xs4all.nl/∼itsme/projects/xda/smartphone-policies.html
11. Hengeveld W. xda tools. Online (November 2009). www.xs4all.nl/∼itsme/projects/xda/tools.html
12. Herrera C.d. Windows CE/Windows Mobile Versions. Online (October 2009). www.pocketpcfaq.com/wce/versions.htm
13. ® persistent storage manager user's guide. Online (September 2005). www.developers.net/filestore2/download/2613
14. Intel. Marvell to purchase Intel's communications and application processor business for $600 Million. Online (June 2006). www.intel.com/pressroom/archive/releases/2006/20060627corp.htm
15. Jansen W., and Ayers R. Guidelines on cell phone forensics. Online (May 2007), Recommendations of the National Institute of Standards and Technology.
16. JTAG, In-system flash programming support. Online. www.jtag.com/en/Support/Device_support/Flash
17. Knijff R.v.d. Embedded systems analysis. In: Casey E. (Ed). Handbook of digital forensics and investigation (2010)
18. Marvell, communications processors. Online. www.marvell.com/products/processors/communications/pxa_90/
19. Microsoft 1, supported processors. Online. msdn.microsoft.com/en-us/windowsembedded/ce/aa714536.aspx#ARM
20. Microsoft 2, virtual memory layout: Windows CE 5.0 vs. Windows Embedded CE 6.0. Online. msdn.microsoft.com/en-us/library/aa914933.aspx
21. Microsoft 3, heaps. Online. msdn.microsoft.com/en-us/library/aa450550.aspx
22. Microsoft 4, TFAT overview. Online. msdn.microsoft.com/en-us/library/aa915463.aspx
23. Microsoft 5, TFAT File naming limitations. Online. msdn.microsoft.com/en-us/library/ms892402.aspx
24. Microsoft 6, driving connectivity. Online. download.microsoft.com/download/6/5/0/6505FA0E-1F39-4A34-BDC9-A655A5D3D2 DB/MicrosoftAutoOverview.pdf
25. Microsoft 7, databases. Online. msdn.microsoft.com/en-us/library/ms885343.aspx
26. Microsoft 8, Windows embedded CE 6.0 evaluation edition. Online. www.microsoft.com/downloads/details.aspx?familyid=7E286847-6E06-4A0C-8CA C-CA7D4C09CB56&displaylang=en
27. MSAB, XACT datasheet. Online. www.msab.com/fileadmin/user_upload/media/Documents/Product_Sgeets/XACT.p df
28. Rogers A., Glaum J., and Tonkelowitz M. Creating file systems within an image file in a storage technology-abstracted manner (June 2005). www.freepatentsonline.com/EP1544732.pdf
29. Samsung, application processor. Online. www.samsung.com/global/business/semiconductor/products/mobilesoc/Product s_ApplicationProcessor.html
30. Stahlberg P, Miklau G, Levine B. Threats to privacy in the forensic analysis of database systems. In: Proc. ACM SIGMOD/PODS; June 2007.
31. Texas Instruments, wireless handset solutions: overview. Online. focus.ti.com/general/docs/wtbu/wtbugencontent.tsp?templateId=6123&na vigationId=11988&contentId=4638
32. Texas Instruments. OMAP35x applications processor technical reference manual. Online (October 2009). focus.ti.com/lit/ug/spruf98d/spruf98d.pdf
33. Xda-developers, wings SSPL and HardSPL. Online (May 2007). forum.xda-developers.com/showthread.php?t=356295
34. Xda-developers, hermes bootloader. Online (November 2008). wiki.xda-developers.com/index.php?pagename=Hermes_BootLoader