1. By Luis Rivera, Michael Zanchelli, Julio Joblete
Mobile Forensics
By Luis Rivera, Michael Zanchelli, Julio Joblete

2. What is Mobile Forensics
It is a branch of Digital Forensics relating to the recovery of digital evidence from a mobile device.
Smart phones, tablets, GPS, Portable music players…
Using Mobile Forensics we can recover personal information such as:
Contacts
Text Messages
threads
Photos

3. Introduction
PRZ forensics is a small forensics company located in Dobbs Ferry NY. The company is owned by Michael Zanchelli, Julio Poblete and Luis Rivera. They are well known for its efficiency, professionalism and accuracy. PRZ has been providing quality digital forensic service to the tri-state area for many years. Their expertise ranges from the extraction of data from a locked mobile device or a broken hard drive, to the examination of physical and digital evidence needed to uncover deleted information and possible crimes.

4. Situation
On Saturday April 14th 2018 at 9:00 pm the body of a middle aged female victim was discovered in the town Spring Valley NY. The victim was identified as Susan McCarthy age 36 from 12 Main st Garnerville NY. The victim was found bound with an electrical cord, gagged and shot 4 times. Evidence suggests that the victim was murdered in a separate location and the body was dumped in the dark alley where it was discovered by two teenagers walking by. Besides being bound and shot the victim also showed blunt force trauma to her face and chest area. The only evidence recovered from the crime scene was the victim’s Android phone. In search for more clues about this horrendous crime local police requested the assistance of PRZ forensics.

8. Forensic Tools MOBILedit (record a voice-over)
The first forensic tool we’ve used in this project was mobiledit, this tool supports most of the smartphone companies, such Samsung apple and Motorola. Has a nice easy GUI interface, it has the abilities to recover lost text messages, get location area information off from the SIM card, contact list, retrieve passwords off the pre-installed browser, and passwords from 3rd party apps, such as facebook, skype Gmail.

9. Forensic Tool cont. FTK Imager (record voice-over)
The second forensic tool we needed was FTK imager, it is used for data preview and an imaging tool for retrieving data for evidence. it takes an image of the hard drive When images an entire drive, a hash is generated that can be verified by the image hash and that drive hash match after the image is created, It also checks the integrity of the data by using two different hash functions, MD5 and SHA-1but does not make changes to the original

10. Evidence

11. Evidence

12. Outcome
Thanks to all the incriminating evidence that was giving to the police, they were able to locate and successfully arrest the perpetrator.