

That it ‘ does not reside on the physical device’ indicates that law enforcement is turning to ‘cloud extraction’: the forensic analysis of user data which is stored on third-party servers, typically used by device and application manufacturers to back up data.


Yet it is not just what is physically stored on the phone that law enforcement are after, but what can be accessed from it, primarily data stored in the Cloud.Ĭellebrite, a prominent vendor of surveillance technology used to extract data from mobile phones, notes in its Annual Trend Survey that in approximately half of all investigations, cloud data ‘appears’ and that ‘ypically, this data involves social media or application data that does not reside on the physical device.’ Mobile phones remain the most frequently used and most important digital source for law enforcement investigations.
