An analysis of digital forensic examinations: Mobile devices versus hard disk drives utilising ACPO & NIST guidelines

Abstract The aims of this paper are to compare and contrast the current guidelines involved in the forensic examinations of mobile devices and hard disk drives. The paper then identifies areas of mobile device examinations where current guidelines are different and could be lacking strength and solidity. Guidelines and research into the forensic examination of hard disk drives is much more established when compared to that of mobile devices. Both the United Kingdom and the United States of America have published guidelines for the forensic analysis of mobile devices; these guidelines are examined throughout this paper. In the United Kingdom they are issued by ACPO (Association of Chief Police Officers) Good Practice Guide for Computer-Based Electronic Evidence. In the United States of America these are issued by NIST (National Institute of Standards and Technology). Special Publication 800-101, Guidelines on Cell Phone Forensics.