Summary

In this chapter, we introduced the topic of reporting and learned about the best practices for creating a mobile forensic report. First, we discussed how a report should be structured and what questions should be answered. We divided the report into different sections and dissected each of them separately. Then, we learned how an examiner can benefit from using forensic tools to automatically generate reports based on the data being examined. We focused on one tool, Cellebrite Physical Analyzer, and learned how to generate a preliminary report and a complete report with this tool.

In the final part of the chapter, we introduced timeline analysis and learned how an examiner can spot connections between different events by visualizing them in a timeline. We learned how to generate a timeline with Magnet AXIOM, how to interact with it, and how to export the data into a CSV file.

I hope that by reading this book, you have gained the knowledge that will help you acquire and...