Mobile app analysis with Santoku Linux - Andrew Hoog
Jmurray8at April 01,2015 Mobile forensic challenges on IOS and Android
• Smart phones are sensors – nothing new here
• Photos have GPS and triangulation – check the details enabled
• Smart phone is a timeline of a person’s activity
• Standardization in mobile devices
• Interesting ways to defeat encryption
• Turns into a marketing pitch for via Forensics
nbodykat May 01,2015 I like the picture of the cellphone history from the big brick to the little hand-held device. Interesting presentation on mobile forensics when dealing with iOS and Android mobile devices. Talks about the encryption in iOS and Android and how to get around it. I find it interesting that Android leaves unallocated space unencrypted once the phone is decrypted where iOS keeps it encrypted. Of course, law enforcement is griping about these protections for users, but they shouldn't get a freebee on evidence that would normally require a warrant to obtain. People shouldn't have to worry about law enforcement getting their information unless they are suspected of a crime. We still have legal protections in this country. Talks about the remote wipe issue. Individuals can remote wipe their mobile device if it has been taken. Need to make sure the mobile device is off the network so owner can't remote wipe. Interesting contrast between the software updates between iOS and Android. iOS updates are relatively done quickly after release where Android is done usually after the carrier pushes them out. I usually update my iPhone as soon as I'm told an update is available. The information about photos having location information is not new if you're actually paying attention to the news and tech magazines. Had to throw in the meme of Picard from Star Trek. I like the part on burner phones. The presenter is right, they are smartphones. You can buy a burner cell that looks just like a Samsung Galaxy device. I would be interested to see the forensic tools the company has for the burner devices. Most people think law enforcement can't get anything from these phones.
connellytat May 02,2015 This was a good video, but it is a little dated now, as it's 2 years old. It's still relevant, but Jmurray8 is right, and at about the 30 minute mark it turns into a marketing pitch. I went looking for some of the free tools, and the company is now called NowSecure. You can find some YouTube videos on AFLogical.
BretBlakeGMat May 05,2015 A good overall introduction into the short history and main issues in mobile forensics. The information is a bit dated and the audio is typical scratchy online broadcast quality. But besides explaining the issues, the video does not go to deep into actually solving them. After presenting the problems, the author of the video then goes into explaining how his company is uniquely suited to solving them for you, ie the marketing pitch complaint.
jczarnyat May 06,2015 'Meh', not really into marketing pitches. I agree with some of the other posters, video has some decent content but the audio quality is horrible and it detracts from the information. The issue with content on mobile devices is that the technology moves so quickly that information can become outdated quickly. Much of this content is still relevant, because there are still many users of older model phones, but that clock is ticking for sure.