For example, iTunes backup is used to make a logical image of an iPhone or iPad. A software tool is used to make a copy of the files. However, some vendors describe logical extraction narrowly as the ability to gather a particular data type, such as pictures, call history, text messages, calendar, videos, and ringtones. Logical Acquisition, or logical extraction, is a technique for extracting the files and folders without any of the deleted data from a mobile device. Later on, some methods are applied to convert that data into a human readable form. Initially, the received data is in raw format and cannot be read. It allows the forensic tool to collect remnants of deleted data. Physical Acquisition, also known as a physical memory dump, is a technique for capturing all the data from flash memory chips on the mobile device.
The data can be gathered from mobile devices in two ways, namely, physical acquisition and logical acquisition.
How do you gather data from mobile devices? However, the selection of tools and techniques during an investigation depends on the type of mobile device and its associated media. There are many tools and techniques available in mobile forensics.
