Builds on: Advanced Electronic Evidence (Part 1): Collection, Imaging and Recovery
Mobile Devices: Extraction Levels, Locks and App Data
Readiness training. LEA.Training does not grant any official certificate, licence or authority.
"We extracted the phone." That sentence can mean a few photographs of the screen, or a copy of almost everything. A court, a lawyer and an investigator all need to know which.
Focus: what state the phone was in, which level of extraction was done, and what that level could not see. This unit teaches no unlocking method. It is general knowledge. It is not legal advice.
Learning objectives
- Explain why a phone's lock state at seizure decides what can be reached.
- Describe four levels of extraction and what each one misses.
- State the limits of chat data, deleted messages and backups.
- Separate data on the phone from data in a cloud account.
- Take no more than is needed from a victim's or a witness's phone.
This lesson opens when you enrol
A$— · price for the Australia edition is not set yet
Already bought it? Sign in to open it in your classroom.
Video coming soon. The lesson text covers everything you need.
Learning Check
A short, untimed check for this lesson. It is not graded and does not count toward the final assessment. The check runs on the server: questions are sent one attempt at a time and answers are never sent to your browser before you submit.
An offline PDF of this lesson will be available here for enrolled learners.