1. ANALYSIS OF CELL PHONES

2. OBJECTIVES: To provide enforcement officers with a basic understanding of how to analyse and retrieve evidence and intelligence from different types of cell phones.
FOCUS: During this lesson you will be provided basic information on:
What information and intelligence can be obtained from cell phones.
How to extract basic information from cell phones.
How to present this information for court purposes.
EXPECTED RESULTS: By the end of this session the participants will have a more comprehensive understanding of how to analyse and retrieve evidence and intelligence from different types of cell phones.

3. CAUTION
The accessing of information contained within cell phones including SMS history, call history, IMEI number, serial number, photographs, s etc may require the provisions of a search warrant and/or telephone intercept warrant.
Accessing the data may also affect the integrity of the evidence.
Only access cell phone information if you have a legal right to do so and only if this access does not jeopardise the integrity of the evidence.
If you are not sure, don’t do it.

4. Cell Phones Cell phones have become an integral part of our life.
We not only make telephone calls on them we;
Take photographs with them
We send and receive messages on them
We organise our lives with them.

5. Importance for Investigators
Cell phones can provide crucial evidence to a crime through evidence gathered from analysing the phone.
They can place a suspect in the vicinity of a crime.
They can show us who their associates are.
They can tell us a lot about how the criminal lives.

6. ‘Watch this video’

7. What did you see?

8. What he photographed with his phone

9. Derek Medina FACEBOOK KILLER

10. Accessing Information
Treat the telephone like a CRIME SCENE.
The preferred methods of examining a cell phone are;
By your agencies forensic services section.
An accredited external Forensic Services Agency.
An officer who is trained and equipped to analyse cell phones.

11. Additional Evidence Emails Address Book SMS history Call History
Social Media
Notes
Recordings
Photographs
Bank Account Details
GPS data

12. Unique Information I.M.E.I. Number - Phone I.M.I.S. Number – Sim Card
Cell Phone Number – Sim Card
Serial Number – Phone
Serial Number – ICCID Sim Card
PUK Code – Sim Card
Password – Phone.
PIN number – Sim Card
SKU number - Phone

13. I.M.E.I. Number
International Mobile Station Equipment Identity number.
Unique to each phone handset.
Used to identify if a stolen phone is using the network.
What SIM cards have been used in a handset.

14. How to find the IMEI Number
Open the phone and it is usually printed inside the battery compartment.
If you don’t want to open the phone, or can’t, dial *#06#
Criminals will try and change the IMEI number – websites

15. Sim Cards Subscriber Identity Module.
The phone number attached to the SIM card.
The SIMs unique serial number – Integrated Circuit Card Identifier (ICCID).
Two passwords. One for the user and one for the service provider (PUK code).

16. How to find the phone number?
Sometimes a criminal will not tell you the number of their cell phone.
Check their address book.
Dial
Do not ring from your own phone number.

17. RECORDING EVIDENCE
We want to be able to show who had possession or who used the cell phone.
We can do this by;
Check on SIM card.
Check on IMEI number.
Address book.
Contents of SMS messages.
Calls made to and from the cell phone.
From photographs/videos stored on the phone.
From applications used/stored on the phone.

18. Criminals take photos with their phones

19. Forensic Analysis Tools

20. Forensic Analysis
Example of Forensic Analysis to be inserted here.

21. Manual Analysis of a Cell Phone
Things you will need:
Camera - Still/Video
Notepad
Suitable background
Photo board.
Be aware of reflections off the phone.
Remember to wear gloves.

22. STEP 1 PHOTO BOARD NAME: Person of Interest DATE EXAMINED: ????
OFFENCE: Murder/Drugs etc
PHOTOGRAPHER: Rank Officers Name/Reg.
O.I.C: Rank Officers Name/Reg.
EXHIBIT REF: ???

23. Photoboard

24. Template Photograph number. Date photo taken. Time photo taken.
Who took the photo.
Description of what the photo shows.

25. Example 1

26. Sim Card

27. Pin Code and Screen Shot

28. Address Book

29. Contact Details
Contact name of Boss.
Phone number of
+856 – Lao PDR
Business name of XAYSAVANG TRADING COMPANY

30. SMS Message Logs
What numbers have sent or received SMS messages from.
Here we have a number sending a text message to the phone.

31. Message Details

32. Call Log We can see that our phone has made;
1 phone call to
Sent 2 SMS to
Received 2 SMS from
Times call was made and messages sent.

33. Call Details
A call to at 7.43am for 0 seconds.
A call to at 6.24am 51 second duration.
Text message sent to at 6.21am.

34. Applications
Gallery.
Calender. s.
Internet.
Google.
Downloads.

35. Gallery

36. Messenger Applications
This phone has WhatsApp.
But could also include;
Line
Facebook
Twitter
TextMe

37. Reflections Gloves
Remember to be aware of reflections from light sources and the camera flash.
Remember to wear gloves.

38. Beware…..you may find some strange things when you analyse phones!!

39. Thank you!
Questions?
UNODC Regional Centre for East Asia and the Pacific
United Nations Building
3rd floor, B Block
Rajdamnern Nok Avenue
Bangkok Thailand
Tel: (+662)
Fax: (+662)