Baker_lab2

Lab #2 Nicholas Baker CELEBRITY STALKING CASE Case Brief: The owner of a Palm Treo 650 Smart Phone was arrested for stalking outside of a well-known celebrity’s home on the morning of May 14, 2009. Investigators must determine if the phone contains evidence pertaining to the stalking of ______? Case Questions 1. What is the owner’s name and address? Jeff Altman, 3284 Balboa Ave. San Diego CA 92121 2. When was the device last “synched?” Wed. May 13 th 11:42:50 2009 3. Whose work phone number is 911? Johnny Rocket 4. What is the owner picking up before the BBQ at the beach? Beer and Cak 5. Is there Internet history being stored on the device? If so, what sites were visited?  http://www.amazon.com  http://www.smut360.com  http://www.smut360.com/  http://www.bet.comangbus.com  http://www.marvle.com  http://www.marvel.com  http://www.google.com  http://www.vzwpics.com

 http://www.verizon.com/  http://www.marvel.com/movies  http://www.yahoo.cm  http://www.marvel.com/moviewww.marvelmobile.com  http://vision.sprintpcs.com/  http://www.bangbus.com  http://www.trialbyerror.com  http://www.2girls1cup.com  http://www.lostpedia.com  http://www.androidhacks.com  http://www.facebook.com  http://www.myspace.com.com  http://www.ebay.com  http://www.holden.com  http://www.marvelmobile.com/  http://www.yahoo.com  http://www.vzw.com  http://www.verizonwireless.com  http://www.ebaymobile.com  http://www.wellsfargo.com  http://www.marvel.com  http://www.paraben.com  http://www.davidhasselhoff.com  http://www.hasselhoff.com  http://www.tmz.com  http://www.davidhasselhoffonline.com 6. What is the Username associated with the device? Fred 7. What is the phone number for voice mail? 702-406-7110 8. When is “Baywatch Trivia Night?” 10/4/2008 9. With what celebrity is the owner of the device obsessed? David Hasselhoff 10. Are there pictures of this celebrity on the device? If so, how many? Yes, there are pictures of David Hasselhoff on the device and there are 17 of them. 11. Write a 1-page report answering the below questions

The importance of data extraction and recovery in mobile device forensics cannot be overstated. This function serves as the initial step in collecting evidence, enabling investigators to retrieve a comprehensive set of information from the device under scrutiny. In forensic analysis, every piece of data, whether it be text messages, call logs, images, or application data, can contribute to constructing a detailed narrative of events. This function is fundamental to uncovering relevant evidence that may be crucial in understanding the context of a crime, such as a celebrity stalking case, and establishing a solid foundation for subsequent analyses. The function of timeline and communication analysis is pivotal for investigators to create a coherent and chronological account of activities. By organizing extracted data in a timeline, forensic analysts can identify patterns, correlations, and anomalies that may be indicative of criminal behavior. In cases involving stalking, this function aids in mapping out the sequence of events, helping investigators understand the dynamics of the relationship between the suspect and the victim. Analyzing communication logs provides insights into the nature and frequency of interactions, contributing to the establishment of motive and supporting the overall investigative process. The importance of location tracking and geospatial analysis in mobile device forensics is underscored when dealing with crimes that have a spatial component, such as stalking. This function allows investigators to trace the movements of the suspect by extracting location data from the mobile device. Knowing where a suspect was at specific times can be crucial for establishing connections to crime scenes or the proximity to the victim. Geospatial analysis further enhances the interpretability of this information, providing visual representations that aid investigators in reconstructing timelines, identifying hotspots, and strengthening the evidentiary link between the suspect's activities and the criminal behavior in question. In essence, this function contributes significantly to the spatial understanding of a case and supports the investigative process by providing valuable context.