SmartPhone discovery is heavily dependent on experts. What steps need to be done to ensure no data is lost? What are the best collection strategies? Can there be a targeted collection on BYOD devices? If not, how can data be reviewed?
Brad and Russ also discussed the following hypothetical, giving great insight on how to approach mobile forensics:
Executive at start-up uses personal cell phone for work. Receives work email and personal. Executive is an active texter, who communicates with her family by text and business partners.
Executive is sitting at a stoplight when sideswiped by another car. Other driver is at fault. She takes photos of the damaged cars. One is texted to her husband that she is ok, followed by an email from her personal account to her insurance agent with a photo of the damage. Executive also emails business partners to say she was hit by a car and will not be in the office.
What is your collection strategy to only acquire data relevant to the accident? How would you not collect company confidential information? How would you collect potentially privileged data protected by the spousal communication privilege?