Mobile Devices: Evidentiary Gold Mine or Empty Mine Shaft?
A discussion of the capabilities and limitations of mobile device analysis.
C. Matthew Curtin, CISSP
Interhack Corporation
Mobile devices are ubiquitous and effectively tether their users to the electronic world. Analysis of mobile devices can be an invaluable tool for internal investigations, protection of intellectual property, and the collection of evidence.
Downloads: 
Mobile Devices: Evidentiary Gold Mine
or Empty Mine Shaft?
We consider a series of case studies to address the collection of evidence from mobile devices, recovery of deleted data, analysis of devices never made available to the forensic analyst.
Finally we present a checklist of actions information security professionals can take to ensure proper preservation, analysis, and use of mobile device data.