>> Hey everyone, welcome back to the course.
In the last video, we talked about the different steps
>> we need to take before a mobile investigation,
>> some different mobile threats as well as some laws.
One of the main things we need to be aware of
>> in a mobile investigation
>> is a case Riley versus the State of California.
>> This is a Supreme Court case.
Basically, what it did is it required a search warrants
>> by law enforcement officers
>> before they can look through a mobile device.
>> Of course, there's always ways to circumvent that,
but for the most part, that's the process.
We always want to make sure we have a search warrant
before we start doing anything on a mobile device.
Just keep that in mind for your exam.
The other aspect that it entailed
was once you do an investigation,
anything that's not related to the investigation
>> on that mobile device
>> needs to be redacted from the public record.
>> The main reason being
>> because a lot of sensitive information
>> is found on the mobile devices.
>> Different types of mobile device threats.
Some of the most common ones that you may
>> or may not see tested on the exam
>> are going to be things like malware,
>> for example, your spyware, smishing attacks,
>> or as you know,
>> this is a form of social engineering attacks.
>> Basically sending that SMS message
>> and saying, "Hey, you get $50 Best Buy discount today.
>> Click this link."
>> Then you click the link
>> and now you get spyware on your phone.
>> Never click a link in a message on your phone,
>> a text message.
>> Some people do, but just don't ever do that.
Data loss, as we mentioned,
that's the top mobile threats,
so keep that in mind for your exam,
as well as different web or network attacks.
We have different APIs in mobile phone.
For example, you just want to know each of these,
your communication API, your GUI API,
and then your phone API.
The communication API,
they are basically to facilitate communication,
so it simplifies the process
>> of interacting with different web services,
>> SMS messaging, or email messaging as well.
Again, just remember that communication API
>> is there to help facilitate communication.
>> GUI API. This one creates menus
>> and submenus in designing applications.
>> It's also an interface for developers
>> to build other plugins.
>> Then we have our phone API.
This one's going to be
>> things like our application layer.
>> It's also, as the name implies,
responsible for making calls,
receiving calls, or SMS messaging.
The SIM card or Subscriber Identity Module.
This one, as I mentioned before,
contains things like your contact list,
your address book, your messages,
different timestamps, last dialed numbers, etc.
A very valuable thing to obtain
>> as a forensic investigator.
>> Then we have other cellular components,
so things like our mobile switching center.
That processes calls and messages within a network
>> and then routes them between
>> things like your landline and the wireless networks.
The Base Transceiver Station or BTS,
that facilitates a user with wireless communication
>> between the mobile phone and the network.
>> The Base Station Controller or BSC.
This one basically manages
the transceivers equipment
and performs channel assignments.
It's part of the GSM architecture,
>> that controls one or more base transceiver stations
>> and also the cell site's radio signals.
In that way, all of that reduces
>> the load on the switch.
>> The Base Station Subsystem.
That one is one of the major sections
of a cellular network.
It controls the base station controller obviously
>> and then it also is used
>> to handle traffic, network switching, etc.
The Home Location Register or HLR.
That's going to be the database.
Basically, it's the central repository system
for the subscriber data and service information.
Again, it's storing it in the database.
Then we have our Visitor Location Register or VLR.
That's going to be the database that's in conjunction
with the HLR for mobile phones
>> that are roaming outside of their service area.
>> It contains the current location of the mobile user,
as well as the Temporary Mobile Subscriber Identity
or the TMSI.
In this video, we talked about
different types of mobile threats, different laws,
and then some of the components of cellular systems.
In the next video, we're going to talk about IMEI
>> and also things like ESN.