The identification phase

The forensic examiner should identify the following details for every examination of a mobile device:

• The legal authority
• The goals of the examination
• The make, model, and identifying information for the device
• Removable and external data storage
• Other sources of potential evidence

We will discuss each of them in the following sections.