MOBILE FORENSICS

Forensic analysis of Android SIM card artefacts

SIM and eSIM data form an important basis for mobile communications on an Android device. As part of an IT forensic investigation, they can provide evidence regarding the mobile connections used, network operators and specific device configurations.

SIM and eSIM information
IMSI (International Mobile Subscriber Identity)
ICCID (Integrated Circuit Card Identifier)
Network operator and service provider details
Mobile network configurations
Notices regarding SIM card changes
Timestamps and system artefacts
Device- and manufacturer-specific configuration files

TECHNICAL BACKGROUND

Technical Fundamentals

Depending on the device manufacturer, Android version and hardware, Android stores various details regarding SIM or eSIM usage.

Forensically relevant artefacts include, amongst others:

  • •SIM and eSIM information
  • •IMSI (International Mobile Subscriber Identity)
  • •ICCID (Integrated Circuit Card Identifier)
  • •Network operator and service provider details
  • •Mobile network configurations
  • •Notices regarding SIM card changes
  • •Timestamps and system artefacts
  • •Device- and manufacturer-specific configuration files

The information available depends on the specific hardware, Android version and the artefacts present.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Following a suitable forensic data backup, SIM-related system artefacts, configuration files and mobile network information are analysed using recognised IT forensic tools and manual analysis. The results are correlated with call logs, text messages, timestamps and other technical artefacts. All stages of the investigation are documented in a reproducible manner.
2
LanCologne produces expert reports for private individuals, as well as for companies and solicitors. Our reports have already been used in court proceedings. In some cases, we have been directly commissioned to produce IT forensic reports. Upon request, we can provide anonymised or redacted sample reports or extracts.

TYPICAL QUESTIONS

When is this analysis required?

  • ✔Which SIM or eSIM was set up in the device?
  • ✔Which network operator was used?
  • ✔Is there any evidence of a SIM card change?
  • ✔What mobile network configurations are available?
  • ✔How significant are the existing artefacts?

LIMITATIONS & CONCLUSION

What you should know

Not every SIM card change or mobile network activity is permanently recorded. The reliability of the data depends on the artefacts actually available, as well as on the device, the Android version and the usage scenario.

Analysing SIM and eSIM artefacts provides important technical information about the mobile network configuration of an Android device. To draw reliable conclusions, all available artefacts must be assessed together.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Would you like to have SIM or eSIM artefacts from an Android device professionally examined? LanCologne can assist you with an objective IT forensic analysis and comprehensive expert documentation.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

What is the IMSI?

The IMSI is an international subscriber identifier assigned to a mobile connection.

What is the ICCID?

The ICCID uniquely identifies a physical SIM card.

Is it possible to find evidence of a SIM card change?

Depending on the data source, corresponding system artefacts may be present.

Are eSIMs also being investigated?

Yes. Where technically accessible artefacts are available, they are analysed.

Could an expert report be drawn up on this matter?

Yes. The results are documented in a transparent manner and assessed from a technical perspective.