Mobile Device Forensics

Mobile Device Forensics

About Our Mobile Device Forensics Practice

Law & Forensics has extensive experience performing forensics on mobile devices in a wide range of civil and criminal disputes, investigations, arbitrations, and administrative proceedings.

Whether data was deleted or hidden, intentionally or not, if it is present on the device – our forensics team can identify, collect, and forensically preserve it.

Our Services

100s of years of collective experience doing forensics. And of course working out of the box and solving problems…

Conduct Forensic Investigations Data Management File Recovery and Analysis Author, Create, and Testify

Conduct Forensic Investigations Involving Mobile Devices

Deliver a strategic, systematic, and economic approach to investigating and collecting a myriad of data sources including network, mobile devices, smartwatches, fitness trackers, and other mobile devices.
Identify, collect, and analyze custodians and document locations across multiple mobile devices using eDiscovery and forensics tools.

Preserve, Identify and Collect Data from Mobile Devices

Identify and analyze relevant files on mobile devices including smartphones, tablets, smartwatches, fitness trackers, and other mobile devices.
Collect electronically stored information (ESI) and data using forensic tools from a wide range of mobile devices including Samsung devices (Galaxy, Note, Gravity, S8530, Galaxy Tab), Apple iPhones, Google Pixel, Android devices, Apple devices (iPod, Apple TV, Apple Watch), Microsoft devices (Microsoft Surface tablet, Xbox), ZTE devices (Blade, nubia, Axon), Acer devices and phones, Dell devices and phones, LG phones and devices, Motorola devices and phones.
Cull, process, and search ESI using forensic and e-discovery tools.
Advise clients that are working with third-party vendors on best practices relating to processing and searching ESI from mobile devices.

Recover and Analyze Valid and Deleted Files from Mobile Devices

Examine and recover valid and deleted electronically stored information and data stored in mobile devices’ non-volatile (NAND) flash memory or associated cloud accounts, and even analyzing backups stored on other devices.
Examine deleted data, even if the deleted data on the device is unrecoverable because it has been overwritten, our team may still prove that it was deleted, which can still be considered key information for forensics cases.
Analyze data collected from all types of mobile devices using various forensic tools, including proprietary forensic hardware and software.

Author Expert Reports, Create and Review Forensic Collection Protocols, and Testify on Wide Range of Mobile Forensic Topics

Prepare reports on technical topics related to mobile devices and ESI.
Develop defensible collection plans, including tracking and documentation that demonstrate reasonable preservation of ESI and data from mobile devices, tablets, smartphones, tablets, fitness trackers, and other mobile devices.
Review opposing parties’ expert reports and preparing rebuttal reports on technical topics related to mobile devices and ESI.
Testify in depositions, civil and criminal trials, arbitrations, and administrative proceedings on the completeness of opposing party experts analysis or the results of Law & Forensics analysis in all types of cases including white-collar crime, fraud, intellectual property theft, breach of contract, partnership dissolutions, employee misconduct, workplace harassment, trade secret theft, copyright infringement, and failed transactions.

Case Studies by Industry

Software

Industry/Sector: Software

Type of Case: Breach of Contract

Description: Hired by in-house counsel to perform a forensic investigation that resulted in a favorable outcome for the client, a software company with a complex breach of contract dispute. Efforts included:

- Identified, collected, and preserved data from laptops, desktops, proprietary medical testing, and dozens of mobile devices.
- Recovered ESI and responsive data, including deleted iPhone messages, emails and photographs, and information on proprietary medical testing devices.
- Analyzed valid and deleted files and incorporated the evidence into a report that the company used to obtain a favorable settlement.

Aerospace Manufacturing

Industry/Sector: Aerospace

Type of Case: Data Breach Litigation

Description: Retained by outside counsel to conduct a forensic investigation with a medium-size aerospace manufacturing firm in connection to a data breach. Efforts included:

- Recovered data from multiple smartphones, tablets, and other personal devices, including iPhones, iPads, Android phones and tablets, and Windows devices such as the Surface.
- Collected and forensically analyzed evidence including deleted emails, text messages, pictures, GPS, and location data.
- Provided an expert report of findings to outside counsel that was critical in achieving a favorable outcome for the client.

Real Estate

Industry/Sector: Real Estate

Type of Case: Bankruptcy

Description: Served as a forensic neutral to Bankruptcy Trustee in a bankruptcy case worth hundreds of millions of dollars. Efforts included:

Worked with the FBI, Interpol, and other law enforcement agencies to arrange for the collection of computers, iPhones, and other devices in Europe (Paris, Madrid, Brussels).
Retrieved and analyzed multiple devices that were not previously identified by prior law enforcement and investigative efforts.
Identified multiple bank accounts previously unknown to the bankruptcy trustee responsible for the appointment and assisted with collecting funds.

100s of Android Devices

analyzed

100s of Thousands

of files recovered

1000s of Devices Scanned

with our software

50.3k Mailboxes

examined by L&F

50+ Collective Years

of relevant experience

100’s of Reports

written

Mobile Forensics Practice Edge

Cyber Insurance for Law Firms: Understanding the Cyber Risk Policy and Key Considerations for Law Firm Policy Holders

Capabilities

We have proven capabilities of providing our clients with results that exceed expectations in a range of disputes and investigations involving mobile devices, where others often have failed. Cases types we have worked on involving mobile devices specifically include: Antitrust litigation, Breach responses, CCPA, Civil Rights/Section 1983 litigation, Consumer class actions, Consumer Protection Litigation, Copyright and trademark litigation RICO; , Cybersecurity, Employee misconduct, Fair Labor Standard Act (FLSA) litigation, FinTech litigation, Foreign Corrupt Practices Act, FTC and FDA regulatory investigations, GDPR compliance, Healthcare fraud, HUD and related FHA investigations, Insurance fraud, Intellectual property theft, Medical device litigation, Merger and Acquisitions (M&A) litigation, Multidistrict litigation, National security, NY DFS investigations, Patent litigation, Pension/ERISA violations, Privacy litigation, Real estate litigation, Regulatory investigations, Securities class actions, Security law violations and SEC regulatory investigations, Shareholder rights litigation, State Attorney General investigations, State privacy investigations, Trade and Commerce disputes, White Collar Crime investigations, and Workplace harassment.

Annual Review of Regulations of Bitcoin and Blockchain in the United States and Abroad

Competitive fees

Our fees structure is competitive, and we offer clients success based, hourly and fixed fee arrangements while ensuring that each engagement is spearheaded by a senior member of our team, with significant knowledge and experience.

Expertise

Our Mobile Forensics team of experts has 20+ years of investigatory and testifying experience related to mobile devices. Many of our team are both lawyers and technologists with real world experience in litigating cases, which gives us a unique and valuable edge in trials, hearings, and disputes involving mobile devices. Our practice has access to and uses a wide range of forensic software and hardware including X-Ways Forensics, WireShark, AccessData FTK, Encase, BlackBag Forensic Software, Nuix, The Sleuth Kit, Volatility Framework Systems, e-fense, ProDiscover Forensics, Paladin, FTK Imager, Magnet RAM Capture, Registry Recon, Cellebrite, Tsunami Blu, Nordic eSIM, Paraben, Oxygen Forensics, MacQuisition, and Cellebrite UFED Touch.

Review of Alternative Dispute Resolution Case Law in 2018

Quality Control

All work performed undergoes a quality control review so the finished product can withstand scrutiny by opposing counsel and experts.