ELEC ENG 7010 - Mobile Phone Forensic Process and Analysis

This immersive course introduces students to the principles of Chain of Evidence and the process of forensic analysis, by considering mobile phone devices from the point of discovery/seizure through triage and securement at the crime scene, unlocking, imaging, analysis and preparation of an expert witness report and affidavit suitable for presentation in South Australian criminal courts. The technical characteristics of mobile phone devices and inherent logs, databases, files and other records will be introduced. This may include advanced features such as health database records and encrypted messaging applications. Of particular note are standard and extended security features including authentication, encryption and data protection. Students will also be introduced to the principles of mobile phone networks and network records, and the interpretation of Call Data Records and other data available from Mobile Network Carriage Service Providers, including Lawful Call Intercept, and A and B party and data connections. Students will use appropriate licensed data analysis tools to investigate phone contents and network records. Students will be exposed through practice to relevant laws related to telecommunications interception, privacy and Court practice. Due to sensitive content, it may be necessary to provide unclassified content to mainstream students; while cleared students may be able to access sensitive, protected content in some parts of the course.