GSM Mobile Device Evidence File – GSM .XRY
The data contained in the image was acquired using Micro Systemation’s GSM .XRY version 3.6. While forensic mobile device acquisition tools continue to improve, the forensic workstation must be configured allowing successful playback of audio and video files as well as displaying foreign languages.
The mobile device (manufacture/model depicted in image filename) contains audio files (i.e., .wav, .mp3) and three video files (i.e., .3gp). Your task is to load the mobile device acquisition image with GSM .XRY and configure your system to play these files within the GSM .XRY environment.
The second task is to load the SIM acquisition image with GSM .XRY and properly display Abbreviated Dialing Numbers and Text messages in French and Chinese.
The mobile device internal memory image contains two audio files of type .mp3 and .wav and three .3gp video files.
Address book entries and text messages in French and Chinese.
Text messages in French and Chinese.
Creating this test image
The test image was created first by populating data onto the internal memory of a mobile device and associated media (i.e., subscriber identity moduel [SIM]) and acquiring the data with Micro Systemation’s GSM .XRY version 3.6.
The test images provide mobile forensics specialists using GSM .XRY the ability to determine if the forensic workstation is setup to display foreign character sets and to ensure that GSM .XRY’s media settings have been modified to point to the suggested media player allowing audio and video playback within the GUI.
|GSM Mobile Device Evidence File – GSM .XRY|
|GSM .XRY V3.6_ATT_SIM Card.xry|
|GSM .XRY V3.6_Motorola V3.xry|
|GSM .XRY V3.6_Nokia 6101.xry|
|GSM .XRY V3.6_Tmobile_SIM.xry|