Additional insight writing

Arun1990
Instruction2ee.docx

Instructions: Add additional insight to these opinions or challenge the opinions. Use real world experience to support your views, as appropriate. 1) Forensic tools can be classified in varying levels of complexity and capabilities, with some possessing military-grade decryption and others used solely for drive cloning and surface level skimming of data. Based on the requirements of an organization, forensics tools can cater to the software needs of a particular task. .XRY, developed by Micro Systems, is considered an entry level extraction software with a primary focus on integrity of data more so than overall extraction, which puts it right into the category of drive cloning and thoroughly hashed copies of information being made. Currently, .XRY is divided into two types of software: Logical and Physical. The .XRY Logical software is the official base model, which maintains a highly mobile, OS-based data extraction. .XRY Physical is a more advanced software that can completely bypass an operating system and dump all data through memory dumps, enabling a faster response time when attempting to perform a data extraction that can be considered high risk or pertaining to sensitive information. Regardless of which one is chosen, both versions of (MSAB, 2018) .XRY focus on maintaining solid integrity from the moment the data drive is located to full extraction and memory dump status. Outside of the two major iterations of .XRY, there are also miscellaneous based applications used to extract data out of a Cloud server and non-conforming devices. These require different extraction means due to not operating on the most common operating systems and in traditional hardware. When determining which version of .XRY is used, every one of the software in .XRY supports over 2,800 types of pass codes and 23,000 different types of devices capable of having data extracted from, regardless of motherboard and chip set (MSAB, 2018). Although .XRY markets itself for companies that do not have much experience or require a more supported forensic product, .XRY can be adapted into an experienced forensic toolkit so that its software can be found useful in more situations. 2) When looking at these tools provided to discuss, the topic of mobile phone forensics is brought to the spotlight.  Mobile forensics is the way of the future.  Based on Pew Research, ownership and use of cell phones tops 90% for adults, versus the 65% in 2005.  I am sure this figure is higher because this study was conducted in 2013.  The reason that statistic is so important is because of the topic for this weeks discussion.  Mobile Forensics, is considered the #1 go to for law enforcement and is requested so much that many labs are overwhelmed with requests.    Many digital investigators are new to the field and are in search of a “Phone Forensics for Dummies," but that doesn't exists.  So what does the law enforcement field do in need of a mobile forensics tool?  They get a hold of Paraben.  Paraben Device Security, or E3:DS as it is called now.  It is pretty cost effective for the agency that needs robust support and will provide training for their software so the user knows exactly how to interface with the product and GUI.  Device Security will acquire test message history, to include deleted messages, phonebooks, call histories, calendars, file systems, gps waypoints, email and the registry.  This software bundle is a one stop shop for mobile forensic and data collection on mobile platforms with more than 29,000 devices supported.  What I like about the Paraben software is they offer the potential client a 15 day full access free trial to see if it will work for their type of forensics management and current operating systems.  Paraben has also established a training academy that will offer certifications and credentialing on their products in mobile security platforms.