This awardee has received supplemental funding. This award detail page includes information about both the original award and supplemental awards.
Description of original award (Fiscal Year 2007, $400,000)
BKForensics has developed and successfully deployed a three day hands on training course specifically designed to lead the investigator through cell phone seizure, evidence preservation, data acquisition and forensic analysis. This training will be deployed to up to ninety (90) officers per month (five classes of eighteen officers). Each attendee will return to their agency with the hardware, software and reference material allowing them to establish cell phone forensic training. ca/ncf
In the spring of 2006, tools used to address cell phone forensics and training were identified as a need by state and local enforcement. BK Forensics has developed a training course based on the physical attributes of the cell phone, offering the investigator knowledge to go beyond logical data and recover data that has been flagged 'restricted' by the manufacturer as well as deleted data.
BK Forensics training starts with cell phone terminology and network principles. This information will assist the investigator in identifying data that is recoverable from the phone, or may be obtained from the phone carrier via a search warrant or subpoena. The course walks the investigator through security, data recovery and analysis of the SIM, to logical and physical acquisitions and finally into logical and physical data interpretation. The investigators will have hands on practice with cell phones, including hardware devices capable of obtaining both logical and physical images of the cell phone, infrared reader offering an option for logical acquisition, software for logical interpretation, Cell Phone Analyzer ' software (currently the only automated tool capable of interpreting the proprietary binary data from the phone's physical chip(s) and a seven piece universal tool kit). These hands on practical exercises help establish a comfort level for the examiner. In addition to the hardware and software, each examiner is provided with a comprehensive manual that contains the basic principles of cell phone forensics.
This project contributes to the reduction of crime laboratory computer forensic backlog by properly training forensic analysts in evidence processing decreasing turnaround time, and therefore reducing existing backlogs of requests for cell phone forensics.