MOBILE FORENSICS

Preservation of evidence from smartphones

The proper preservation of evidence forms the basis of any IT forensic investigation. Errors at this early stage can result in information being lost or in subsequent findings being only partially verifiable. The aim is therefore to preserve the current data set as unchanged as possible and to document all steps in full.

Forensic analysis
Documentation admissible in court
GDPR-compliant processing
Experienced experts

TECHNICAL BACKGROUND

Technical Fundamentals

Smartphones contain a wide variety of different data sources, such as messaging apps, photos, location data, browser information and app databases. Much of this information changes simply through normal use of the device. For this reason, a backup should be carried out as early as possible using appropriate forensic methods.

OUR APPROACH

This is how your examination will be carried out

A transparent process – from the initial enquiry to the handover of the report.

1
Every assignment begins with an analysis of the issue at hand and an assessment of the device. The most suitable method for data recovery is then selected. Throughout this process, the priority is always to handle the evidence as carefully as possible.
2
LanCologne prepares private expert reports on behalf of private individuals, companies and solicitors, as well as expert reports in connection with court-ordered investigations. Our investigations have already been used in various court proceedings. Furthermore, in certain cases we have been directly commissioned to produce IT forensic reports. All stages of the process are fully documented and can be verified – insofar as this is technically possible.

TYPICAL QUESTIONS

When is this analysis required?

LIMITATIONS & CONCLUSION

What you should know

Careful preservation of evidence lays the foundation for a robust technical assessment. It safeguards the integrity of the data and enhances the traceability of subsequent investigation findings.

CUSTOMER REVIEWS

What our customers say

4.8 out of 5 stars on Trustpilot · 54 reviews

★★★★★

“The highest standards of professionalism, prompt service and excellent communication. They made the seemingly impossible a reality. This is what genuine customer service is all about – unrivalled in Germany!”

idalein

Verified review on Trustpilot

★★★★★

“Very helpful advice, excellent responsiveness and communication. My problem was completely resolved and the lost data was recovered. I’m very satisfied and, of course, relieved!”

Layla Pankratz

Verified review on Trustpilot

★★★★★

“My problem was sorted out professionally and quickly; everyone I spoke to was always friendly, and I can still get in touch if I have any questions – I’m very grateful for that!”

a woman from Cologne

Verified review on Trustpilot

Enquire now – free initial consultation

Would you like to have data from a smartphone backed up professionally? LanCologne can assist you with a transparent IT forensic evidence preservation process to serve as the basis for further investigations.

RELATED TOPICS

You might also be interested in

FREQUENTLY ASKED QUESTIONS

Frequently Asked Questions

Click on a question to see the answer.

Why should the smartphone not be used any further, if at all possible?
Any further use may alter timestamps or overwrite data.
Can a locked smartphone be examined?
Depending on the device, operating system and technical capabilities, it may be possible to back up all or part of the data.
What happens after the data backup?
The data that has been secured is subjected to forensic examination and analysed in the light of the specific issues at hand.
Is the original data being altered?
The aim is to avoid making changes to the original as far as possible and to document all steps in a way that is easy to follow.
Can evidence be preserved as a precautionary measure?
Yes. Many clients have their data backed up first before commissioning a detailed analysis.