An overview and examination of digital PDA devices under forensics toolkits

Proceedings of the 5th Australian Digital Forensics Conference

Volumn , Issue , 2007, Pages 34-51

  Sansurooah, Krishnun ^a  

^a EDITH COWAN UNIVERSITY   (Australia)

Author keywords

Encase; Forensics analysis; Image acquisition; PDA; PDA memory; PDA seizure

Indexed keywords

ENCASE; FORENSICS ANALYSIS; FORENSICS TOOL; HANDHELDS; PDA; PDA SEIZURE; ULTRA-LIGHT; WORKING ENVIRONMENT;

CRIME; DIGITAL DEVICES; ELECTRONIC CRIME COUNTERMEASURES; IMAGE ACQUISITION;

PERSONAL DIGITAL ASSISTANTS;

EID: 79951979115     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. Ayers, R. & Jansen W. (2004). PDA Forensic Tools: An Overview and Analysis. Retrieved May 3, 2007 from NIST: http://csrc.nist.gov/publications/ nistir/nistir-7100-PDAForensics.pdf.
2. Canalys. (2004). Global Mobile Device Market Shows Tremendous Growth. Retrieved May 25, 2007, from http://www.canalys.com/pr/2004/r2004081.htm.
3. Carrier, B. (2005). File System Forensic Analysis. Addison Wesley Professional.
4. Cheong, K.,W. & Wong, L., W. (2005) Forensic Image Analysis of Familiar-based iPAQ. Retrieved May 12, 2007, from http://www.forensicfocus.com/ downloads/familiar-ipaq-forensic-analysis.pdf.
5. CompactFlash Association. (2004). CompactFlash Association Homepage. Retrieved April 22, 2007, from http://www.compactflash.org/.
6. Fernandes, L. (2003). Palm OS dot short-cuts. Retrieved May 18, 2007, from http://www.ee.ryerson.ca/~elf/visor/dot-shortcuts.html.
7. Frichot, C (2004). An Analysis of the Integrity of Palm Images Acquired with PDD. Retrieved May 11, 2007, from http://scissec.scis.ecu.edu.au/ publications/2004-FRICHOT-ACNIFC-Analysis-of-the-Integrity-of-Palm-Images- Acquired-with-PDD.pdf.
8. Grant, J. (2002). Pdd: Memory Imaging and Forensic Analysis of Palm OS Devices. Retrieved May 26, 2007 from http://www.grandideastudio.com/files/ security/mobile/pdd-palm-forensics.pdf.
9. Guidance Software. (2004). Encase Forensic Edition: The Standard in Computer Forensics. Retrieved May 30, 2007, from http://www.encase.com/products/ downloads/efe-datasheet.pdf.
10. Hillerman, G. (2003). Palm OS File Format Specification. Retrieved May 17, 2007 from http://www.palmos.com/dev/support/docs/fileformats/FileFormatsTOC. html.
11. Hitachi Global Storage Technologies. (2004). Hitachi Global Storage Technologies Product Information. Retrieved April 11, 2007, from http://www.hgst.com/portal/site/en/menuitem.a994b57654279b5daa67bca4bac4f0a0/.
12. Howlett, A., (2201) Palm OS Programmer's FAQ. Retrieved May 31, 2007 from http://palmtops.about.com/od/pdaglossary/g/PRC-File.htm.
13. InformIT (2005). PDA Forensics. Retrieved May 18, 2007, from http://www.informit.com/guides/printerfriendly.asp?g=security&seqNum=104.
14. Jansen, W., & Ayers, R. (2004). Guidelines on PDA Forensics. Retrieved May 19, 2007 from http://www.csrc.nist.gov/publications/nistpubs/800- 72/sp800-72.pdf.
15. Kruse II, W. G., & Heiser, J. G. (2002). Computer Forensics: Incident Response Essentials. Boston: Addison- Wesley.
16. McKemmish, R. (1999). What is Forensic Computing? Canberra, Australia: Australian Institute of Criminology.
17. Memorystick.com Business Center. (2004). Memory Stick Media Capacity. Retrieved April 12, 2007, from http://www.memorystick.com/en/ms/variety1.html.
18. Multimediacard Association. (2004). MMCA: Home Page. Retrieved April 12, 2007 from http://www.mmca.org/.
19. PalmSource (2004). Palm OS® Programmer's Companion Volume I. Retrieved April 27, 2007, from http://www.palmos.com/dev/support/docs/palmos/ Memory.html.
20. PalmSource Inc. (2002). Palm OS Emulator (Version 3.5). Retrieved April 22, 2007, from http://www.access-company.com/developers/documents/docs/emulator/ Emulator-Front.html.
21. PalmSource Inc. (2004). Memory | Palm OS Programmer's Companion. Retrieved May 25, 2007, from http://www.palmos.com/dev/support/docs/palmos/ Memory.html.
22. PalmSource Inc. (2004b). PalmSource | Palm OS. Retrieved May 29, 2007, from http://www.palmsource.com/palmos/.
23. Paraben Corporation. (2005). PDA Seizure. Pleasant Grove, UT.
24. PaulEggleton (2005). FamiliarFaq. Retrieved May 17, 2007, from http://handhelds.org/moin/moin.cgi/FamiliarFaq#head- 87a7fac0185ca2be60ecd1a946827adef5921208.
25. SD Card Association. (2004). Concept of SD memory Card. Retrieved April 12, 2007, from http://www.sdcard.org/sd-memorycard/index.html.